debian/rust-bzip2 vulnerabilities

Latest debian/rust-bzip2 CVEs

Newest publication first

1. CVE-2023-22895 bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow

   Published 2023-01-10

   High·CVSS 7.5 EPSS 1.3%

   The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.