BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bzip2Upgrade bzip2-libsUpgrade bzip2-devel | Nov 7, 2024 | Jun 19, 2019 |
| Alpine Linux | — | Upgrade bzip2 | Jul 10, 2019 | Jun 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bzip2-develUpgrade bzip2-debuginfoUpgrade bzip2Upgrade bzip2-libs | Jun 24, 2021 | Jun 19, 2019 |
| Debian | — | Upgrade clamavUpgrade bzip2 | Jun 25, 2019 | Jun 19, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 13, 2019 |
| Freebsd | — | Upgrade bzip2Upgrade clamav-milterUpgrade clamav | Aug 21, 2019 | Aug 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bzip2-libsUpgrade bzip2Upgrade bzip2-devel | Sep 12, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bzip2Upgrade bzip2-libsUpgrade bzip2-devel | Sep 25, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2 | Jul 24, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2 | Jul 26, 2019 | Jun 19, 2019 |
| Oracle Missing Cpu Oct 2020 | — | Apply the October 2020 Critical Patch Update (CPU) for Oracle Database | Oct 22, 2020 | Jun 19, 2019 |
| Oracle Solaris | — | Upgrade compress/bzip2 to version 1.0.7-11.4.13.0.1.2.0 on Solaris 11.4 | Sep 17, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade bzip2-develUpgrade bzip2-libsUpgrade bzip2 | Nov 15, 2024 | Nov 15, 2024 |
| Redhat_linux | — | No solution existsUpgrade bzip2-libsUpgrade bzip2-debugsourceUpgrade bzip2-debuginfoUpgrade bzip2-libs-debuginfoUpgrade bzip2-develUpgrade bzip2 | Nov 7, 2024 | Jun 19, 2019 |
| Rocky_linux | — | Upgrade bzip2-debugsourceUpgrade bzip2-libsUpgrade bzip2-develUpgrade bzip2Upgrade bzip2-debuginfoUpgrade bzip2-libs-debuginfo | Nov 19, 2024 | Jun 19, 2019 |
| Suse | — | Upgrade libbz2-1-32bitUpgrade bzip2Upgrade libbz2-develUpgrade bzip2-docUpgrade clamavUpgrade libbz2-1Upgrade libfreshclam2Upgrade libclamav9Upgrade clamav-develUpgrade libbz2-devel-32bitUpgrade libclammspack0Upgrade libclamav7 | Jul 16, 2019 | Jun 19, 2019 |
| Ubuntu | — | Upgrade bzip2Upgrade clamav (Ubuntu Pro)Upgrade libbz2-1.0 (Ubuntu Pro)Upgrade bzip2 (Ubuntu Pro)Upgrade libbz2-1.0Upgrade lib64bz2-1.0 (Ubuntu Pro)Upgrade lib32bz2-1.0Upgrade clamavUpgrade lib64bz2-1.0Upgrade lib32bz2-1.0 (Ubuntu Pro) | Jun 26, 2019 | Jun 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub