Kritik CVSS 9.8
CVE-2019-12900: Bzip2: sınır dışı yazma
Açıklama (NVD)
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Özet bilgiler
- Ürün
- Bzip Bzip2
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %7,98 (yüzdelik 95)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| bzip-bzip2 | — | 1.0.6 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| opensuse-leap | 15.0 | 15.0 | — |
| opensuse-leap | 15.1 | 15.1 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 19.04 | 19.04 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.2 | 11.2 | — |
| freebsd-freebsd | 11.3 | 11.3 | — |
| freebsd-freebsd | 11.3 | 11.3 | — |
| freebsd-freebsd | 12.0 | 12.0 | — |
| freebsd-freebsd | 12.0 | 12.0 | — |
| freebsd-freebsd | 12.0 | 12.0 | — |
| freebsd-freebsd | 12.0 | 12.0 | — |
| freebsd-freebsd | 12.0 | 12.0 | — |
| freebsd-freebsd | 12.0 | 12.0 | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- packetstormsecurity.com
- packetstormsecurity.com
- gitlab.com
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.debian.org
- lists.debian.org
- lists.debian.org
- lists.debian.org
- seclists.org
- seclists.org
- security.FreeBSD.org
- support.f5.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.oracle.com
- lists.opensuse.org
- CWE-787