PT-2016-3293 · Julian Seward+8 · Bzip2+8
Published
2016-06-30
·
Updated
2025-11-14
·
CVE-2019-12900
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
bzip2 versions 1.0.6 and earlier
Description
The issue is related to an out-of-bounds write in the BZ2 decompress function in decompress.c when there are many selectors. This can lead to memory corruption, resulting in a denial of service and/or remote code execution. Network services or command line utilities decompressing untrusted bzip2 payloads are affected. The exploitation of this bug relies on an undefined behavior that appears to be handled safely by current compilers.
Recommendations
For bzip2 versions 1.0.6 and earlier, consider updating to a newer version to mitigate the risk. As a temporary workaround, restrict access to untrusted bzip2 payloads to minimize the risk of exploitation. Avoid using the BZ2 decompress function in decompress.c until the issue is resolved.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Freebsd
Red Hat
Rocky Linux
Suse
Ubuntu
Bzip2