Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-r1z5-yrv6-1qam

Summary The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

Aliases

alias	CVE-2011-4089

Fixed_packages

url	pkg:deb/debian/bzip2@1.0.6-1?distro=trixie
purl	pkg:deb/debian/bzip2@1.0.6-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.6-1%3Fdistro=trixie

url pkg:deb/debian/bzip2@1.0.6-4

purl pkg:deb/debian/bzip2@1.0.6-4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-7mts-4d2b-ebbk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.6-4

url	pkg:deb/debian/bzip2@1.0.8-4?distro=trixie
purl	pkg:deb/debian/bzip2@1.0.8-4?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.8-4%3Fdistro=trixie

url	pkg:deb/debian/bzip2@1.0.8-5?distro=trixie
purl	pkg:deb/debian/bzip2@1.0.8-5?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.8-5%3Fdistro=trixie

url	pkg:deb/debian/bzip2@1.0.8-6?distro=trixie
purl	pkg:deb/debian/bzip2@1.0.8-6?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.8-6%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/bzip2@0.1pl2-5

purl pkg:deb/debian/bzip2@0.1pl2-5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-6p4j-8tkm-8ya4

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-qh6b-gp6e-syac

vulnerability	VCID-r1z5-yrv6-1qam

vulnerability	VCID-w1t5-m6ba-9yfs

vulnerability	VCID-yq6f-3sf6-f3h7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@0.1pl2-5

url pkg:deb/debian/bzip2@0.9.0c-2

purl pkg:deb/debian/bzip2@0.9.0c-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-6p4j-8tkm-8ya4

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-qh6b-gp6e-syac

vulnerability	VCID-r1z5-yrv6-1qam

vulnerability	VCID-w1t5-m6ba-9yfs

vulnerability	VCID-yq6f-3sf6-f3h7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@0.9.0c-2

url pkg:deb/debian/bzip2@0.9.5d-2

purl pkg:deb/debian/bzip2@0.9.5d-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-6p4j-8tkm-8ya4

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-qh6b-gp6e-syac

vulnerability	VCID-r1z5-yrv6-1qam

vulnerability	VCID-w1t5-m6ba-9yfs

vulnerability	VCID-yq6f-3sf6-f3h7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@0.9.5d-2

url pkg:deb/debian/bzip2@1.0.2-1.woody2

purl pkg:deb/debian/bzip2@1.0.2-1.woody2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-6p4j-8tkm-8ya4

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-qh6b-gp6e-syac

vulnerability	VCID-r1z5-yrv6-1qam

vulnerability	VCID-w1t5-m6ba-9yfs

vulnerability	VCID-yq6f-3sf6-f3h7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.2-1.woody2

url pkg:deb/debian/bzip2@1.0.2-7

purl pkg:deb/debian/bzip2@1.0.2-7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-6p4j-8tkm-8ya4

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-r1z5-yrv6-1qam

vulnerability	VCID-w1t5-m6ba-9yfs

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.2-7

url pkg:deb/debian/bzip2@1.0.3-6

purl pkg:deb/debian/bzip2@1.0.3-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-r1z5-yrv6-1qam

vulnerability	VCID-w1t5-m6ba-9yfs

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.3-6

url pkg:deb/debian/bzip2@1.0.5-1%2Blenny1

purl pkg:deb/debian/bzip2@1.0.5-1%2Blenny1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-j6d7-d4ka-u3e4

vulnerability	VCID-r1z5-yrv6-1qam

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.5-1%252Blenny1

url pkg:deb/debian/bzip2@1.0.5-6%2Bsqueeze1

purl pkg:deb/debian/bzip2@1.0.5-6%2Bsqueeze1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6337-hr5n-qyey

vulnerability	VCID-7mts-4d2b-ebbk

vulnerability	VCID-r1z5-yrv6-1qam

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip2@1.0.5-6%252Bsqueeze1

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4089.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4089.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2011-4089

reference_id

reference_type

scores

value	0.00152
scoring_system	epss
scoring_elements	0.35573
published_at	2026-06-11T12:55:00Z

value	0.00152
scoring_system	epss
scoring_elements	0.35753
published_at	2026-06-12T12:55:00Z

value	0.00152
scoring_system	epss
scoring_elements	0.35772
published_at	2026-06-13T12:55:00Z

value	0.00152
scoring_system	epss
scoring_elements	0.35756
published_at	2026-06-14T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2011-4089

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4089
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4089

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632862
reference_id	632862
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632862

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/18147.c
reference_id	CVE-2011-4089;OSVDB-77356
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/18147.c

reference_url	https://usn.ubuntu.com/1308-1/
reference_id	USN-1308-1
reference_type
scores
url	https://usn.ubuntu.com/1308-1/

Weaknesses

Exploits

date_added	2011-11-27
description	bzexe (bzip2) - Race Condition
required_action	`null`
due_date	`null`
notes	`null`
known_ransomware_campaign_use	`true`
source_date_published	2011-11-23
exploit_type	local
platform	linux
source_date_updated	2011-11-27
data_source	Exploit-DB
source_url

Severity_range_score null

Exploitability 2.0

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r1z5-yrv6-1qam

Vulnerability Instance