bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bzip2 | — | Upgrade macOS to the latest version | Dec 16, 2011 | May 19, 2005 |
| Debian | — | Upgrade bzip2 | Jul 30, 2024 | May 19, 2005 |
| Freebsd | — | Upgrade FreeBSDUpgrade bzip2 | Dec 10, 2025 | Jun 29, 2005 |
| Suse | — | Upgrade bzip2-32bitUpgrade bzip2-64bitUpgrade bzip2-x86Upgrade bzip2 | Feb 17, 2015 | May 19, 2005 |
| Ubuntu | — | Upgrade bzip2 | Nov 8, 2024 | May 19, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub