CVE:CVE-2019-19911
CNNVD:CNNVD-202001-097
Pillow是一款基于Python的图像处理库。
Pillow 6.2.2之前版本中存在输入验证错误漏洞。攻击者可利用该漏洞造成拒绝服务（进程终止）。
solution:Upgrade python pillow to a higher version than 6.2.2,and avoid the version (,6.2.2); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,19.10,and avoid the version 14.04,16.04,18.04,19.10