Skip to content
OpenAdvisories
Medium WID-SEC-2023-0913 7 CVEs

bzip3: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 10, 2023 · Updated Apr 10, 2023 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in bzip3 ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

bzip3 ist ein frei verfügbares Komprimierungsprogramm zur verlustfreien Kompression von Dateien.

Vulnerabilities 7

  • High 8.8
    CVE-2023-29421

    An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block.

    bzip3 bzip3 Debian Ubuntu
  • Medium 6.5
    CVE-2023-29415

    An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafte…

    bzip3 bzip3 Debian Ubuntu
  • Medium 6.5
    CVE-2023-29416

    An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a cr…

    bzip3 bzip3 Debian Ubuntu
  • Medium 6.5
    CVE-2023-29418

    An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read.

    bzip3 bzip3 Debian Ubuntu
  • Medium 6.5
    CVE-2023-29419

    An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read.

    bzip3 bzip3 Debian Ubuntu
  • Medium 6.5
    CVE-2023-29420

    An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decod…

    bzip3 bzip3 Debian Ubuntu
  • Unscored —
    CVE-2023-29417

    An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situation…

    bzip3 Debian

Revision history

  1. #1

    Initiale Fassung

References