CVE-2005-1260 bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
MediumCVSS 5.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bzip2 | < 1.0.3 | 1.0.3 |
| Canonical Ubuntu Linux | = 4.10 | No fix listed |
| Canonical Ubuntu Linux | = 5.04 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| apple mac os x | < 10.4.11 | 10.4.11 |
| debian/bzip2(Debian:12) | < 1.0.2-7 | 1.0.2-7 |
| debian/bzip2(Debian:13) | < 1.0.2-7 | 1.0.2-7 |
| debian/bzip2(Debian:14) | < 1.0.2-7 | 1.0.2-7 |
References
- docs.info.apple.com broken-link
- APPLE-SA-2007-11-14 mailing-list third-party-advisory vendor-advisory
- 15447 third-party-advisory
- 19183 third-party-advisory
- 27274 third-party-advisory
- 27643 third-party-advisory
- 103118 broken-link vendor-advisory
- 200191 broken-link vendor-advisory
- DSA-741 third-party-advisory vendor-advisory
- FLSA:158801 permissions-required vendor-advisory
- RHSA-2005:474 third-party-advisory vendor-advisory
- 13657 third-party-advisory vdb-entry
- 26444 third-party-advisory vdb-entry
- TA07-319A third-party-advisory us-government-resource
- ADV-2007-3525 permissions-required vdb-entry
- ADV-2007-3868 permissions-required vdb-entry
- oval:org.mitre.oval:def:10700 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:749 signature third-party-advisory vdb-entry
- USN-127-1 third-party-advisory vendor-advisory
- Debian Security Tracker CVE-2005-1260 vendor-advisory