9 results · Feed
-
Medium 4.8
Off-by-One Leading to Out-of-Bounds Write in bzip2
bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed …
-
Critical 9.8
out-of-bounds write when there are many bzip2 selectors
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
-
Medium 6.5CVE-2016-3189 EPSS 16%
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash…
-
Unscored —CVE-2011-4089 Public exploit
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary fil…
-
Unscored —
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-depen…
-
Unscored —
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted …
-
Unscored —
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that cause…
-
Unscored —
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands…
-
Unscored —
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link a…