BZ
Product
Bzip2
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add Bzip2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12900 | 9.8 | Jun 19 | BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors Affected: through 1.0.6 |
| CVE-2016-3189 | 6.5 | Jun 30 | Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to… Affected: 1.0.6 |
| CVE-2011-4089 | – | Apr 16 | The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute… Affected: through 1.0.4; 1.0; 1.0.1; 1.0.2; 1.0.3 |
| CVE-2010-0405 | – | Sep 28 | Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application… Affected: through 1.0.5; 0.9; 0.9.0; 0.9.0a; 0.9.0b; 0.9.0c; +16 more |
| CVE-2008-1372 | – | Mar 18 | bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by… Affected: 0.9; 0.9.5a; 0.9.5b; 0.9.5c; 0.9.5d; 0.9_a; +6 more |
| CVE-2005-1260 | – | May 19 | bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb") Affected: before 1.0.3 |
| CVE-2005-0953 | – | May 2 | Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose… Affected: 0.9; 0.9.5_a; 0.9.5_b; 0.9.5_c; 0.9.5_d; 0.9_a; +5 more |
| CVE-2002-0759 | – | Aug 12 | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and… Affected: 0.9.0; 0.9.0a; 0.9.0b; 0.9.0c; 0.9.5a; 0.9.5b; +4 more |
| CVE-2002-0761 | – | Aug 12 | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an… Affected: 0.9.0; 0.9.0a; 0.9.0b; 0.9.0c; 0.9.5a; 0.9.5b; +4 more |
| CVE-2002-0760 | – | Aug 12 | Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions… Affected: 0.9.0; 0.9.0a; 0.9.0b; 0.9.0c; 0.9.5a; 0.9.5b; +4 more |
Showing 10