BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bzip2-libsUpgrade bzip2Upgrade bzip2-devel | Nov 7, 2024 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade bzip2 | Jul 10, 2019 | Jun 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bzip2-libsUpgrade bzip2Upgrade bzip2-develUpgrade bzip2-debuginfo | Jun 24, 2021 | Jun 19, 2019 |
| Debian | — | Upgrade clamavUpgrade bzip2 | Jun 25, 2019 | Jun 19, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 13, 2019 |
| Freebsd | — | Upgrade clamav-milterUpgrade clamavUpgrade bzip2 | Aug 21, 2019 | Aug 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bzip2Upgrade bzip2-libsUpgrade bzip2-devel | Sep 12, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bzip2-develUpgrade bzip2-libsUpgrade bzip2 | Sep 25, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2 | Jul 24, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bzip2-develUpgrade bzip2Upgrade bzip2-libs | Jul 26, 2019 | Jun 19, 2019 |
| Oracle Missing Cpu Oct 2020 | — | Apply the October 2020 Critical Patch Update (CPU) for Oracle Database | Oct 22, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade compress/bzip2 to version 1.0.7-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2 | Nov 15, 2024 | Nov 15, 2024 |
| Redhat_linux | — | Upgrade bzip2-develUpgrade bzip2-libs-debuginfoUpgrade bzip2Upgrade bzip2-debuginfoNo solution existsUpgrade bzip2-debugsourceUpgrade bzip2-libs | Nov 7, 2024 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade bzip2-libs-debuginfoUpgrade bzip2-develUpgrade bzip2-debugsourceUpgrade bzip2-debuginfoUpgrade bzip2-libsUpgrade bzip2 | Nov 19, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade libclamav9Upgrade libclamav7Upgrade libfreshclam2Upgrade libbz2-devel-32bitUpgrade libclammspack0Upgrade clamav-develUpgrade libbz2-develUpgrade clamavUpgrade bzip2-docUpgrade libbz2-1Upgrade libbz2-1-32bitUpgrade bzip2 | Jul 16, 2019 | Jun 19, 2019 |
| Ubuntu | — | Upgrade libbz2-1.0 (Ubuntu Pro)Upgrade bzip2 (Ubuntu Pro)Upgrade bzip2Upgrade clamav (Ubuntu Pro)Upgrade lib64bz2-1.0Upgrade clamavUpgrade libbz2-1.0Upgrade lib32bz2-1.0Upgrade lib64bz2-1.0 (Ubuntu Pro)Upgrade lib32bz2-1.0 (Ubuntu Pro) | Jun 26, 2019 | Jun 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub