CVE-2016-3076 Pillow Buffer overflow in Jpeg2KEncode.c
MediumCVSS 5.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi pillow(PyPI) | >= 2.5.0, < 3.1.2 | 3.1.2 |
| pypi pillow(PyPI) | = 2.5.0 | No fix listed |
| pypi pillow(PyPI) | = 2.5.1 | No fix listed |
| pypi pillow(PyPI) | = 2.5.2 | No fix listed |
| pypi pillow(PyPI) | = 2.5.3 | No fix listed |
| pypi pillow(PyPI) | = 2.6.0 | No fix listed |
| pypi pillow(PyPI) | = 2.6.1 | No fix listed |
| pypi pillow(PyPI) | = 2.6.2 | No fix listed |
| pypi pillow(PyPI) | = 2.7.0 | No fix listed |
| pypi pillow(PyPI) | = 2.8.0 | No fix listed |
| pypi pillow(PyPI) | = 2.8.1 | No fix listed |
| pypi pillow(PyPI) | = 2.8.2 | No fix listed |
| pypi pillow(PyPI) | = 2.9.0 | No fix listed |
| pypi pillow(PyPI) | = 3.0.0 | No fix listed |
| pypi pillow(PyPI) | = 3.1.0 | No fix listed |
| pypi pillow(PyPI) | = 3.1.0.rc1 | No fix listed |
| pypi pillow(PyPI) | = 3.1.0rc1 | No fix listed |
| pypi pillow(PyPI) | = 3.1.1 | No fix listed |
| debian/pillow(Debian:12) | < 3.2.0-1 | 3.2.0-1 |
| debian/pillow(Debian:13) | < 3.2.0-1 | 3.2.0-1 |
| debian/pillow(Debian:14) | < 3.2.0-1 | 3.2.0-1 |
| python pillow | = 2.5.0 | No fix listed |
| python pillow | = 2.5.1 | No fix listed |
| python pillow | = 2.5.2 | No fix listed |
| python pillow | = 2.5.3 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| python pillow | = 2.6.0 | No fix listed |
| python pillow | = 2.6.0-rc1 | No fix listed |
| python pillow | = 2.6.1 | No fix listed |
| python pillow | = 2.6.2 | No fix listed |
| python pillow | = 2.7.0 | No fix listed |
| python pillow | = 2.8.0 | No fix listed |
| python pillow | = 2.8.1 | No fix listed |
| python pillow | = 2.8.2 | No fix listed |
| python pillow | = 2.9.0 | No fix listed |
| python pillow | = 2.9.0-dev0 | No fix listed |
| python pillow | = 2.9.0-dev1 | No fix listed |
| python pillow | = 2.9.0-dev2 | No fix listed |
| python pillow | = 3.0.0 | No fix listed |
| python pillow | = 3.0.0-rc1 | No fix listed |
| python pillow | = 3.1.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- github.com
- github.com product
- github.com
- web.archive.org
- pillow.readthedocs.io release-notes vendor-advisory
- 98042 vdb-entry
- github.com vendor-advisory
- Debian Security Tracker CVE-2016-3076 vendor-advisory