NetSight
IP …
critical9.8

CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Impact

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Affected products

VendorProductAffected versions
BzipBzip2
through 1.0.6
DebianDebian Linux
Version 8.0
OpensuseLeap
Versions 15.0, 15.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.04
FreebsdFreebsd
Versions 11.2, 11.3, 12.0
PythonPython
from 3.7.0 before 3.7.13
from 3.8.0 before 3.8.13
from 3.9.0 before 3.9.11
from 3.10.0 before 3.10.3

Weakness classification

CWE-787

References