BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bzip2alma-upgrade-bzip2-develalma-upgrade-bzip2-libs | Nov 7, 2024 | Jun 19, 2019 | |
| Alpine Linux | alpine-linux-upgrade-bzip2 | Jul 10, 2019 | Jun 19, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bzip2amazon-linux-ami-2-upgrade-bzip2-debuginfoamazon-linux-ami-2-upgrade-bzip2-develamazon-linux-ami-2-upgrade-bzip2-libs | Jun 24, 2021 | Jun 19, 2019 | |
| Debian | debian-upgrade-bzip2debian-upgrade-clamav | Jun 25, 2019 | Jun 19, 2019 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Nov 13, 2019 | |
| Freebsd | freebsd-upgrade-package-clamavfreebsd-upgrade-package-clamav-milterfreebsd-upgrade-package-bzip2 | Aug 21, 2019 | Aug 21, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-bzip2huawei-euleros-2_0_sp2-upgrade-bzip2-develhuawei-euleros-2_0_sp2-upgrade-bzip2-libs | Sep 12, 2019 | Jun 19, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-bzip2huawei-euleros-2_0_sp3-upgrade-bzip2-develhuawei-euleros-2_0_sp3-upgrade-bzip2-libs | Sep 25, 2019 | Jun 19, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-bzip2huawei-euleros-2_0_sp5-upgrade-bzip2-develhuawei-euleros-2_0_sp5-upgrade-bzip2-libs | Jul 24, 2019 | Jun 19, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bzip2huawei-euleros-2_0_sp8-upgrade-bzip2-develhuawei-euleros-2_0_sp8-upgrade-bzip2-libs | Jul 26, 2019 | Jun 19, 2019 | |
| Oracle Missing Cpu Oct 2020 | oracle-apply-oct-2020-cpu | Oct 22, 2020 | Jun 19, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-compress-bzip2-1-0-7-11-4-13-0-1-2-0 | Sep 17, 2019 | Jun 19, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-bzip2oracle-linux-upgrade-bzip2-develoracle-linux-upgrade-bzip2-libs | Nov 15, 2024 | Nov 15, 2024 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-bzip2redhat-upgrade-bzip2-debuginforedhat-upgrade-bzip2-debugsourceredhat-upgrade-bzip2-develredhat-upgrade-bzip2-libsredhat-upgrade-bzip2-libs-debuginfo | Nov 7, 2024 | Jun 19, 2019 | |
| Rocky_linux | rocky-upgrade-bzip2rocky-upgrade-bzip2-debuginforocky-upgrade-bzip2-debugsourcerocky-upgrade-bzip2-develrocky-upgrade-bzip2-libsrocky-upgrade-bzip2-libs-debuginfo | Nov 19, 2024 | Jun 19, 2019 | |
| Suse | — | suse-upgrade-bzip2suse-upgrade-bzip2-docsuse-upgrade-clamavsuse-upgrade-clamav-develsuse-upgrade-libbz2-1suse-upgrade-libbz2-1-32bitsuse-upgrade-libbz2-develsuse-upgrade-libbz2-devel-32bitsuse-upgrade-libclamav7suse-upgrade-libclamav9suse-upgrade-libclammspack0suse-upgrade-libfreshclam2 | Jul 16, 2019 | Jun 19, 2019 |
| Ubuntu | ubuntu-pro-upgrade-bzip2ubuntu-pro-upgrade-clamavubuntu-pro-upgrade-lib32bz2-1-0ubuntu-pro-upgrade-lib64bz2-1-0ubuntu-pro-upgrade-libbz2-1-0ubuntu-upgrade-bzip2ubuntu-upgrade-clamavubuntu-upgrade-lib32bz2-1-0ubuntu-upgrade-lib64bz2-1-0ubuntu-upgrade-libbz2-1-0 | Jun 26, 2019 | Jun 19, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub