PT-2016-3293 · Julian Seward+8 · Bzip2+8
Publicado
2016-06-30
·
Atualizado
2025-11-14
·
CVE-2019-12900
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
bzip2 versions 1.0.6 and earlier
Description
The issue is related to an out-of-bounds write in the BZ2 decompress function in decompress.c when there are many selectors. This can lead to memory corruption, resulting in a denial of service and/or remote code execution. Network services or command line utilities decompressing untrusted bzip2 payloads are affected. The exploitation of this bug relies on an undefined behavior that appears to be handled safely by current compilers.
Recommendations
For bzip2 versions 1.0.6 and earlier, consider updating to a newer version to mitigate the risk. As a temporary workaround, restrict access to untrusted bzip2 payloads to minimize the risk of exploitation. Avoid using the BZ2 decompress function in decompress.c until the issue is resolved.
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Freebsd
Red Hat
Rocky Linux
Suse
Ubuntu
Bzip2