CVE-2010-0405 Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execu...
MediumCVSS 5.1
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bzip2 | <= 1.0.5 | No fix listed |
| bzip2 | = 0.9 | No fix listed |
| bzip2 | = 0.9.0 | No fix listed |
| bzip2 | = 0.9.0a | No fix listed |
| bzip2 | = 0.9.0b | No fix listed |
| bzip2 | = 0.9.0c | No fix listed |
| bzip2 | = 0.9.5_a | No fix listed |
| bzip2 | = 0.9.5_b | No fix listed |
| bzip2 | = 0.9.5_c | No fix listed |
| bzip2 | = 0.9.5_d | No fix listed |
| bzip2 | = 0.9.5a | No fix listed |
| bzip2 | = 0.9.5b | No fix listed |
| bzip2 | = 0.9.5c | No fix listed |
| bzip2 | = 0.9.5d | No fix listed |
| bzip2 | = 0.9_a | No fix listed |
| bzip2 | = 0.9_b | No fix listed |
| bzip2 | = 0.9_c | No fix listed |
| bzip2 | = 1.0 | No fix listed |
| bzip2 | = 1.0.1 | No fix listed |
| bzip2 | = 1.0.2 | No fix listed |
| bzip2 | = 1.0.3 | No fix listed |
| bzip2 | = 1.0.4 | No fix listed |
| libzip2 | <= 1.0.5 | No fix listed |
| debian/bzip2(Debian:12) | < 1.0.5-6 | 1.0.5-6 |
| debian/bzip2(Debian:13) | < 1.0.5-6 | 1.0.5-6 |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bzip2(Debian:14) | < 1.0.5-6 | 1.0.5-6 |
| debian/clamav(Debian:12) | < 0.96.3+dfsg-1 | 0.96.3+dfsg-1 |
| debian/clamav(Debian:13) | < 0.96.3+dfsg-1 | 0.96.3+dfsg-1 |
| debian/clamav(Debian:14) | < 0.96.3+dfsg-1 | 0.96.3+dfsg-1 |
References
- blogs.sun.com
- git.clamav.net
- APPLE-SA-2011-03-21-1 vendor-advisory
- FEDORA-2010-17439 vendor-advisory
- FEDORA-2010-1512 vendor-advisory
- SUSE-SR:2010:018 vendor-advisory
- [oss-security] 20100921 bzip2 CVE-2010-0405 integer overflow mailing-list
- 41452 third-party-advisory vendor-advisory
- 41505 third-party-advisory
- 42350 third-party-advisory
- 42404 third-party-advisory
- 42405 third-party-advisory
- 42529 third-party-advisory
- 42530 third-party-advisory
- 48378 third-party-advisory
- GLSA-201301-05 vendor-advisory
- support.apple.com
- www.bzip.org
- RHSA-2010:0703 vendor-advisory
- RHSA-2010:0858 vendor-advisory
- 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console mailing-list
- USN-986-2 vendor-advisory
- USN-986-3 vendor-advisory
- USN-986-1 vendor-advisory
- www.vmware.com
- ADV-2010-2455 vdb-entry
- ADV-2010-3043 vdb-entry
- ADV-2010-3052 vdb-entry
- ADV-2010-3073 vdb-entry
- ADV-2010-3126 vdb-entry
- ADV-2010-3127 vdb-entry
- xorl.wordpress.com
- bugzilla.redhat.com
- wwws.clamav.net
- wwws.clamav.net
- Debian Security Tracker CVE-2010-0405 vendor-advisory