Unscored severity · published Aug 19, 2009
CVE-2009-1884
Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Compress-raw-bzip2 · Bzip
through 2.017; 2.0.00_10; 2.0.00_12; 2.0.00_14; 2.0.01; 2.0.02; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1884
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1884
Vendor Advisory
http://secunia.com/advisories/36386
secunia.com
http://secunia.com/advisories/36415
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200908-07.xml
Patch
http://www.securityfocus.com/bid/36082
bugs.gentoo.org
https://bugs.gentoo.org/show_bug.cgi?id=281955
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=518278