{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/61698?format=json","vulnerability_id":"VCID-qa9m-qwng-53b4","summary":"An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.","aliases":[{"alias":"CVE-2023-29415"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/89577?format=json","purl":"pkg:deb/debian/bzip3@1.2.2-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip3@1.2.2-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/89579?format=json","purl":"pkg:deb/debian/bzip3@1.5.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip3@1.5.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/89578?format=json","purl":"pkg:deb/debian/bzip3@1.5.3-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/bzip3@1.5.3-2%3Fdistro=trixie"}],"affected_packages":[],"references":[{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034177","reference_id":"1034177","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034177"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qa9m-qwng-53b4"}