Description
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bzip2 | 1.0.5-6 | — |
| Debian 14 | clamav | 0.96.3+dfsg-1 | — |
| Debian 13 | bzip2 | 1.0.5-6 | — |
| Debian 13 | clamav | 0.96.3+dfsg-1 | — |
| Debian 12 | bzip2 | 1.0.5-6 | — |
| Debian 12 | clamav | 0.96.3+dfsg-1 | — |
| Debian 5.0 | bzip2 | 1.0.5-1+lenny1 | DSA-2112-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | bzip2 +2 | 1.0.5-7.el6_0 | RHSA-2010:0858 |
| RHEL 5 | bzip2 +2 | 1.0.3-6.el5_5 | RHSA-2010:0703 |
| RHEL 4 | bzip2 +2 | 1.0.2-16.el4_8 | RHSA-2010:0703 |
| RHEL 3 | bzip2 +2 | 1.0.2-14.EL3 | RHSA-2010:0703 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bzip2 | 1.0.6-37.82 | openSUSE-SU-2024:10132-1 |
| openSUSE Tumbleweed | clamav | 0.99.2-4.1 | openSUSE-SU-2024:10571-1 |
Advisories 5
- RHSA-2010:0703 Red Hat Security Advisory: bzip2 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2010:0858 Red Hat Security Advisory: bzip2 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2112-1 bzip2 - integer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10132-1 bzip2-1.0.6-37.82 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10571-1 clamav-0.99.2-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- USN-986-3 vendor-advisory
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3
- FEDORA-2010-17439 vendor-advisory
- USN-986-1 vendor-advisory
- USN-986-2 vendor-advisory
- 41452 third-party-advisory
- 42404 third-party-advisory
- 48378 third-party-advisory
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230
- ADV-2010-3073 vdb-entry
- ADV-2010-2455 vdb-entry
- APPLE-SA-2011-03-21-1 vendor-advisory
- 42530 third-party-advisory
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231
- [oss-security] 20100921 bzip2 CVE-2010-0405 integer overflow mailing-list
- 42529 third-party-advisory
- 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console mailing-list
- 41505 third-party-advisory
- ADV-2010-3052 vdb-entry
- RHSA-2010:0703 vendor-advisory
- RHSA-2010:0858 vendor-advisory
- FEDORA-2010-1512 vendor-advisory
- http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow
- 42405 third-party-advisory
- http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/
- https://bugzilla.redhat.com/show_bug.cgi?id=627882
- ADV-2010-3126 vdb-entry
- GLSA-201301-05 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2010-0019.html
- http://www.bzip.org/
- ADV-2010-3127 vdb-entry
- ADV-2010-3043 vdb-entry
- SUSE-SR:2010:018 vendor-advisory
- 42350 third-party-advisory
- http://support.apple.com/kb/HT4581