BZ
Vendor
Bzip
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-12900 | BZ Bzip2 Bzip | 9.8 | Jun 19 | BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors |
| CVE-2016-3189 | BZ Bzip2 Bzip | 6.5 | Jun 30 | Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to… |
| CVE-2011-4089 | BZ Bzip2 Bzip | – | Apr 16 | The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute… |
| CVE-2010-0405 | BZ Bzip2 Bzip | – | Sep 28 | Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application… |
| CVE-2009-1884 | CO Compress-raw-bzip2 Bzip | – | Aug 19 | Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service… |
| CVE-2008-1372 | BZ Bzip2 Bzip | – | Mar 18 | bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by… |
| CVE-2005-1260 | BZ Bzip2 Bzip | – | May 19 | bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb") |
| CVE-2005-0953 | BZ Bzip2 Bzip | – | May 2 | Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose… |
| CVE-2002-0759 | BZ Bzip2 Bzip | – | Aug 12 | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and… |
| CVE-2002-0761 | BZ Bzip2 Bzip | – | Aug 12 | bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an… |
| CVE-2002-0760 | BZ Bzip2 Bzip | – | Aug 12 | Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions… |