Search for packages
Package details: pkg:deb/debian/bzip2@0.9.5d-2
purl pkg:deb/debian/bzip2@0.9.5d-2
Next non-vulnerable version 1.0.6-9.2~deb10u1
Latest non-vulnerable version 1.0.6-9.2~deb10u1
Risk 8.2
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-7b2j-s3g7-aaak
Aliases:
CVE-2005-0758
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
1.0.3-6
Affected by 5 other vulnerabilities.
VCID-8urm-9ubj-aaac
Aliases:
CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
1.0.6-9
Affected by 1 other vulnerability.
1.0.6-9.2~deb10u1
Affected by 0 other vulnerabilities.
VCID-an3m-4v53-aaaa
Aliases:
CVE-2011-4089
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.
1.0.6-4
Affected by 2 other vulnerabilities.
VCID-ftyp-se1c-aaab
Aliases:
CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
1.0.6-8.1
Affected by 1 other vulnerability.
VCID-hvhn-38c6-aaad
Aliases:
CVE-2008-1372
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
1.0.5-1+lenny1
Affected by 4 other vulnerabilities.
VCID-pvq7-umur-aaag
Aliases:
CVE-2010-0405
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
1.0.5-6+squeeze1
Affected by 3 other vulnerabilities.
VCID-sfe6-46dt-aaah
Aliases:
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
1.0.2-7
Affected by 6 other vulnerabilities.
VCID-zzv2-5d1a-aaan
Aliases:
CVE-2005-0953
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
1.0.2-7
Affected by 6 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T19:18:36.990663+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T19:15:46.054294+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T18:01:00.380448+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:26:09.010094+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:23:04.713199+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:18:30.203224+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:18:11.782894+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:55:13.398240+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:21:35.882262+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:33:59.085027+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:10:37.222499+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak None 36.1.3
2025-06-21T01:07:02.432426+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac None 36.1.3
2025-06-21T00:55:29.565055+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan None 36.1.3
2025-06-20T23:38:14.377168+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah None 36.1.3
2025-06-20T22:24:41.161743+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa None 36.1.3
2025-06-20T22:16:48.169714+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag None 36.1.3
2025-06-20T22:00:41.806671+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab None 36.1.3
2025-06-20T20:22:18.194807+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad None 36.1.3
2025-06-08T13:16:44.574461+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T12:54:21.079836+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:47:22.484468+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:44:32.828976+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:32:42.374931+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:20:42.951208+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:17:32.875620+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:12:23.732275+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:12:04.422753+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:48:40.606729+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:14:42.877318+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:28:02.530981+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:33:16.988033+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak None 36.1.0
2025-06-07T18:29:38.470437+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac None 36.1.0
2025-06-07T18:17:50.691312+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan None 36.1.0
2025-06-07T17:01:10.646700+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah None 36.1.0
2025-06-07T15:48:55.875193+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa None 36.1.0
2025-06-07T15:40:50.225537+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag None 36.1.0
2025-06-07T15:24:16.088971+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab None 36.1.0
2025-06-07T13:58:19.378862+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad None 36.1.0
2025-04-12T21:52:54.579805+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:47:12.608891+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:12:09.917752+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:29:57.731385+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:04:42.378660+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:41:31.433411+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:32:19.137636+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:29:25.750021+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T16:14:03.997878+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:52:02.421950+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:48:58.083854+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:44:19.274705+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:44:00.904615+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:21:08.025381+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:47:16.672912+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:00:21.303488+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:10:59.262278+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak None 36.0.0
2025-04-07T17:07:18.187604+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac None 36.0.0
2025-04-07T16:55:22.533082+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan None 36.0.0
2025-04-07T15:34:24.051888+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah None 36.0.0
2025-04-07T14:19:44.205141+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa None 36.0.0
2025-04-07T14:11:42.727177+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag None 36.0.0
2025-04-07T13:55:34.060329+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab None 36.0.0
2025-04-07T12:32:51.363613+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad None 36.0.0
2024-11-28T13:48:23.572967+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-27T14:07:25.091573+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-26T13:38:42.711157+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-25T07:29:01.241563+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-25T07:06:46.206197+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-25T06:43:25.536870+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-14T00:37:00.433539+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-13T08:18:24.586112+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-12T15:39:34.752737+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-11T19:47:22.775474+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-11T19:33:19.862300+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-11T19:18:35.452825+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-09-21T04:23:30.355862+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T21:38:36.051340+00:00 Debian Oval Importer Affected by VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T15:51:10.204196+00:00 Debian Oval Importer Affected by VCID-hvhn-38c6-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T10:51:32.147261+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T10:49:02.733518+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T10:46:38.460226+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-06-22T20:20:22.378934+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.0rc4
2024-06-22T20:20:21.547184+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 34.0.0rc4
2024-06-22T19:56:38.533352+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah None 34.0.0rc4
2024-06-22T04:56:15.833422+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.0rc4
2024-06-22T04:56:15.033366+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 34.0.0rc4
2024-06-22T04:32:33.693585+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan None 34.0.0rc4
2024-06-21T12:14:28.471819+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.0rc4
2024-06-21T12:14:26.745051+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 34.0.0rc4
2024-06-21T11:31:23.884977+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak None 34.0.0rc4
2024-02-01T04:43:40.216674+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.0rc2
2024-02-01T04:43:39.393366+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 34.0.0rc2
2024-02-01T04:06:28.869962+00:00 Debian Oval Importer Affected by VCID-sfe6-46dt-aaah None 34.0.0rc2
2024-01-31T18:09:59.167127+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.0rc2
2024-01-31T18:09:58.343997+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 34.0.0rc2
2024-01-31T17:48:29.564199+00:00 Debian Oval Importer Affected by VCID-zzv2-5d1a-aaan None 34.0.0rc2
2024-01-31T09:06:37.424596+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.0rc2
2024-01-31T09:06:35.652597+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 34.0.0rc2
2024-01-31T08:23:50.082101+00:00 Debian Oval Importer Affected by VCID-7b2j-s3g7-aaak None 34.0.0rc2