Search for packages
| purl | pkg:deb/debian/bzip2@1.0.3-6 |
| Next non-vulnerable version | 1.0.6-9.2~deb10u1 |
| Latest non-vulnerable version | 1.0.6-9.2~deb10u1 |
| Risk | 8.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-8urm-9ubj-aaac
Aliases: CVE-2019-12900 |
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-an3m-4v53-aaaa
Aliases: CVE-2011-4089 |
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory. |
Affected by 2 other vulnerabilities. |
|
VCID-ftyp-se1c-aaab
Aliases: CVE-2016-3189 |
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. |
Affected by 1 other vulnerability. |
|
VCID-hvhn-38c6-aaad
Aliases: CVE-2008-1372 |
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats. |
Affected by 4 other vulnerabilities. |
|
VCID-pvq7-umur-aaag
Aliases: CVE-2010-0405 |
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7b2j-s3g7-aaak | zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script. |
CVE-2005-0758
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T18:01:00.385444+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:18:30.210291+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:18:11.789955+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:55:13.404304+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:21:35.889084+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:33:59.092737+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T01:10:37.229003+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | None | 36.1.3 |
| 2025-06-21T01:07:02.437885+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.1.3 |
| 2025-06-20T22:24:41.168142+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | None | 36.1.3 |
| 2025-06-20T22:16:48.177149+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | None | 36.1.3 |
| 2025-06-20T22:00:41.812968+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.1.3 |
| 2025-06-20T20:22:18.199886+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | None | 36.1.3 |
| 2025-06-08T13:16:44.579111+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T12:54:21.085267+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:32:42.379988+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:12:23.736975+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:12:04.427384+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:48:40.612004+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:14:42.882009+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:28:02.536502+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:33:16.992717+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | None | 36.1.0 |
| 2025-06-07T18:29:38.474998+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.1.0 |
| 2025-06-07T15:48:55.879735+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | None | 36.1.0 |
| 2025-06-07T15:40:50.230136+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | None | 36.1.0 |
| 2025-06-07T15:24:16.093700+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.1.0 |
| 2025-06-07T13:58:19.383501+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | None | 36.1.0 |
| 2025-04-12T21:52:54.594900+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:47:12.623924+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:12:09.932716+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:29:57.746361+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:04:42.393563+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:41:31.448461+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:14:04.012444+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:44:19.289824+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:44:00.919581+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:21:08.040038+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:47:16.688572+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:00:21.318208+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T17:10:59.276871+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | None | 36.0.0 |
| 2025-04-07T17:07:18.203937+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.0.0 |
| 2025-04-07T14:19:44.220157+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | None | 36.0.0 |
| 2025-04-07T14:11:42.742102+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | None | 36.0.0 |
| 2025-04-07T13:55:34.076624+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.0.0 |
| 2025-04-07T12:32:51.378249+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | None | 36.0.0 |
| 2024-11-28T13:48:23.588645+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-27T14:07:25.106754+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-26T13:38:42.725628+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-25T06:43:25.551827+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-10-14T00:37:00.447878+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-13T08:18:24.600408+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-12T15:39:34.767457+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-11T19:18:35.467863+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-09-21T04:23:30.371661+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T21:38:36.067185+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T15:51:10.220124+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T10:46:38.475136+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-06-21T12:14:28.486038+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc4 |
| 2024-06-21T12:14:26.759110+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc4 |
| 2024-06-21T11:31:23.898837+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | None | 34.0.0rc4 |
| 2024-01-31T09:06:37.439373+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc2 |
| 2024-01-31T09:06:35.667462+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc2 |
| 2024-01-31T08:23:50.096581+00:00 | Debian Oval Importer | Fixing | VCID-7b2j-s3g7-aaak | None | 34.0.0rc2 |