CVE-2022-24303

Related Files

Ubuntu Security Notice USN-5777-1

Posted Dec 14, 2022

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5777-1 - It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An attacker could possibly use this issue to delete arbitrary files. This issue only affected Ubuntu 20.04 LTS. It was discovered that Pillow incorrectly handled the decompression of highly compressed GIF data. An attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2022-24303, CVE-2022-45198

SHA-256 | 1fdd4b6f8214292a55f7b3b2b5203bf1289da1e625bfb65db5b140f92230bd32

Download | Favorite | View

Gentoo Linux Security Advisory 202211-10

Posted Nov 22, 2022

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202211-10 - Multiple vulnerabilities have been found in Pillow, the worst of which could result in arbitrary code execution. Versions less than 9.3.0 are affected.

tags | advisory, arbitrary, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2021-23437, CVE-2021-34552, CVE-2022-22815, CVE-2022-22816, CVE-2022-22817, CVE-2022-24303, CVE-2022-45198, CVE-2022-45199

SHA-256 | bd07c387b443095d407c903a3cd8cafea5051d92e07375c3d52c1299151d97bc

Download | Favorite | View