CVE:CVE-2020-5313
CNNVD:CNNVD-202001-052
Pillow是一款基于Python的图像处理库。
Pillow 6.2.2之前版本中的libImaging/FliDecode.c文件存在缓冲区错误漏洞，该漏洞源于程序没有正确检查边界。远程攻击者可借助特制FLI文件利用该漏洞在系统上执行任意代码，或者导致应用程序崩溃。
solution:Upgrade python pillow to a higher version than 6.2.2,and avoid the version (,6.2.2); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31