CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the....
MediumCVSS 6.5
EPSS 15.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bzip2(Debian:12) | < 1.0.6-8.1 | 1.0.6-8.1 |
| debian/bzip2(Debian:13) | < 1.0.6-8.1 | 1.0.6-8.1 |
| debian/bzip2(Debian:14) | < 1.0.6-8.1 | 1.0.6-8.1 |
| alpine/bzip2(Alpine:v3.10) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.11) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.12) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.13) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.14) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.15) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.16) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.17) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.18) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.19) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.20) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.21) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.22) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.23) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.24) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.4) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.5) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.6) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.7) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.8) | < 1.0.6-r5 | 1.0.6-r5 |
| alpine/bzip2(Alpine:v3.9) | < 1.0.6-r5 | 1.0.6-r5 |
| Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| bzip2 | = 1.0.6 | No fix listed |
| python | >= 3.7.0, < 3.7.13 | 3.7.13 |
| python | >= 3.8.0, < 3.8.13 | 3.8.13 |
| python | >= 3.9.0, < 3.9.11 | 3.9.11 |
| python | >= 3.10.0, < 3.10.3 | 3.10.3 |
References
- Debian Security Tracker CVE-2016-3189 vendor-advisory
- security.alpinelinux.org vendor-advisory
- [oss-security] 20160620 CVE-2016-3189: bzip2 use-after-free on bzip2recover mailing-list
- 1036132 third-party-advisory vdb-entry
- 91297 third-party-advisory vdb-entry
- GLSA-201708-08 third-party-advisory vendor-advisory
- [debian-lts-announce] 20190624 [SECURITY] [DLA 1833-1] bzip2 security update mailing-list third-party-advisory
- USN-4038-2 third-party-advisory vendor-advisory
- USN-4038-1 third-party-advisory vendor-advisory
- 20190715 [slackware-security] bzip2 (SSA:2019-195-01) mailing-list third-party-advisory
- FreeBSD-SA-19:18 third-party-advisory vendor-advisory
- 20190806 FreeBSD Security Advisory FreeBSD-SA-19:18.bzip2 mailing-list third-party-advisory
- [kafka-dev] 20200413 [jira] [Created] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-jira] 20200413 [jira] [Created] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-jira] 20200413 [jira] [Updated] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-users] 20200413 CVEs for the dependency software guava and rocksdbjni of Kafka mailing-list
- [kafka-jira] 20200414 [jira] [Commented] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- packetstormsecurity.com third-party-advisory vdb-entry
- [kafka-jira] 20210729 [jira] [Comment Edited] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-jira] 20210729 [jira] [Commented] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-jira] 20210729 [jira] [Resolved] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-dev] 20210729 [jira] [Resolved] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- [kafka-jira] 20210729 [jira] [Commented] (KAFKA-9858) CVE-2016-3189 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. mailing-list
- cert-portal.siemens.com
- bugs.debian.org issue-tracking