The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2286 advisory.

  - The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load     function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and     earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to     overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.
    (CVE-2014-1932)

  - The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and     earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it     easier for local users to conduct symlink attacks by listing the processes. (CVE-2014-1933)

  - Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute     arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly     JpegImagePlugin.py. (CVE-2014-3007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : python-pillow (ALAS-2023-2286)

critical Nessus Plugin ID 182639

Version 1.1

Version 1.0

Version 1.1 Oct 6, 2023, 5:06 PM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202310061706
Version 1.0 Oct 6, 2023, 4:01 AM New Plugin Feed: 202310060401