BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bzip2-develUpgrade bzip2-libsUpgrade bzip2 | Nov 7, 2024 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade bzip2 | Jul 10, 2019 | Jun 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2-debuginfoUpgrade bzip2 | Jun 24, 2021 | Jun 19, 2019 |
| Debian | — | Upgrade bzip2Upgrade clamav | Jun 25, 2019 | Jun 19, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 13, 2019 |
| Freebsd | — | Upgrade bzip2Upgrade clamav-milterUpgrade clamav | Aug 21, 2019 | Aug 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bzip2-libsUpgrade bzip2Upgrade bzip2-devel | Sep 12, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bzip2Upgrade bzip2-libsUpgrade bzip2-devel | Sep 25, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bzip2-develUpgrade bzip2-libsUpgrade bzip2 | Jul 24, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2 | Jul 26, 2019 | Jun 19, 2019 |
| Oracle Missing Cpu Oct 2020 | — | Apply the October 2020 Critical Patch Update (CPU) for Oracle Database | Oct 22, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade compress/bzip2 to version 1.0.7-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade bzip2Upgrade bzip2-develUpgrade bzip2-libs | Nov 15, 2024 | Nov 15, 2024 |
| Redhat_linux | — | Upgrade bzip2Upgrade bzip2-debuginfoUpgrade bzip2-develUpgrade bzip2-libs-debuginfoUpgrade bzip2-debugsourceUpgrade bzip2-libsNo solution exists | Nov 7, 2024 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2-debuginfoUpgrade bzip2-debugsourceUpgrade bzip2Upgrade bzip2-libs-debuginfo | Nov 19, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade bzip2Upgrade bzip2-docUpgrade clamavUpgrade libbz2-1-32bitUpgrade libbz2-1Upgrade libbz2-develUpgrade libclammspack0Upgrade libclamav9Upgrade clamav-develUpgrade libclamav7Upgrade libbz2-devel-32bitUpgrade libfreshclam2 | Jul 16, 2019 | Jun 19, 2019 |
| Ubuntu | — | Upgrade bzip2 (Ubuntu Pro)Upgrade clamav (Ubuntu Pro)Upgrade libbz2-1.0 (Ubuntu Pro)Upgrade bzip2Upgrade clamavUpgrade lib32bz2-1.0Upgrade lib64bz2-1.0 (Ubuntu Pro)Upgrade lib64bz2-1.0Upgrade lib32bz2-1.0 (Ubuntu Pro)Upgrade libbz2-1.0 | Jun 26, 2019 | Jun 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub