Search for packages
| purl | pkg:deb/debian/bzip2@1.0.2-7 |
| Next non-vulnerable version | 1.0.6-9.2~deb10u1 |
| Latest non-vulnerable version | 1.0.6-9.2~deb10u1 |
| Risk | 8.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7b2j-s3g7-aaak
Aliases: CVE-2005-0758 |
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script. |
Affected by 5 other vulnerabilities. |
|
VCID-8urm-9ubj-aaac
Aliases: CVE-2019-12900 |
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-an3m-4v53-aaaa
Aliases: CVE-2011-4089 |
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory. |
Affected by 2 other vulnerabilities. |
|
VCID-ftyp-se1c-aaab
Aliases: CVE-2016-3189 |
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. |
Affected by 1 other vulnerability. |
|
VCID-hvhn-38c6-aaad
Aliases: CVE-2008-1372 |
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats. |
Affected by 4 other vulnerabilities. |
|
VCID-pvq7-umur-aaag
Aliases: CVE-2010-0405 |
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-sfe6-46dt-aaah | bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb"). |
CVE-2005-1260
|
| VCID-zzv2-5d1a-aaan | Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete. |
CVE-2005-0953
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T19:18:36.994754+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T19:15:46.057946+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:01:00.383834+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:26:09.013401+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:23:04.717299+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:18:30.208105+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:18:11.787758+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:55:13.402330+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:21:35.886808+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:33:59.090224+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T01:10:37.226821+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | None | 36.1.3 |
| 2025-06-21T01:07:02.436107+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.1.3 |
| 2025-06-21T00:55:29.568982+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | None | 36.1.3 |
| 2025-06-20T23:38:14.381316+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | None | 36.1.3 |
| 2025-06-20T22:24:41.166334+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | None | 36.1.3 |
| 2025-06-20T22:16:48.175042+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | None | 36.1.3 |
| 2025-06-20T22:00:41.810925+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.1.3 |
| 2025-06-20T20:22:18.197841+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | None | 36.1.3 |
| 2025-06-08T13:16:44.577610+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T12:54:21.083467+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:47:22.487597+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:44:32.832211+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:32:42.378058+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:20:42.954461+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:17:32.878769+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:12:23.735391+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:12:04.425843+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:48:40.610406+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:14:42.880494+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:28:02.534665+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:33:16.991147+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | None | 36.1.0 |
| 2025-06-07T18:29:38.473508+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.1.0 |
| 2025-06-07T18:17:50.694959+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | None | 36.1.0 |
| 2025-06-07T17:01:10.649833+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | None | 36.1.0 |
| 2025-06-07T15:48:55.878227+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | None | 36.1.0 |
| 2025-06-07T15:40:50.228635+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | None | 36.1.0 |
| 2025-06-07T15:24:16.092131+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.1.0 |
| 2025-06-07T13:58:19.381996+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | None | 36.1.0 |
| 2025-04-12T21:52:54.589929+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:47:12.618980+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:12:09.927736+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:29:57.741530+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:04:42.388659+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:41:31.443414+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:32:19.147671+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:29:25.760080+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:14:04.007590+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:52:02.431904+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:48:58.093865+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:44:19.284811+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:44:00.914609+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:21:08.035174+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:47:16.683288+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:00:21.313394+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T17:10:59.272091+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | None | 36.0.0 |
| 2025-04-07T17:07:18.198551+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.0.0 |
| 2025-04-07T16:55:22.543183+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | None | 36.0.0 |
| 2025-04-07T15:34:24.061914+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | None | 36.0.0 |
| 2025-04-07T14:19:44.215113+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | None | 36.0.0 |
| 2025-04-07T14:11:42.737181+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | None | 36.0.0 |
| 2025-04-07T13:55:34.071093+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.0.0 |
| 2025-04-07T12:32:51.373391+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | None | 36.0.0 |
| 2024-11-28T13:48:23.583374+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-27T14:07:25.101705+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-26T13:38:42.720771+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-25T07:29:01.251380+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-25T07:06:46.215862+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-25T06:43:25.546706+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-10-14T00:37:00.443089+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-13T08:18:24.595600+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-12T15:39:34.762533+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-11T19:47:22.784890+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-11T19:33:19.872333+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-11T19:18:35.462861+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-09-21T04:23:30.366405+00:00 | Debian Oval Importer | Affected by | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T21:38:36.061933+00:00 | Debian Oval Importer | Affected by | VCID-pvq7-umur-aaag | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T15:51:10.214869+00:00 | Debian Oval Importer | Affected by | VCID-hvhn-38c6-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T10:51:32.156894+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T10:49:02.743088+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T10:46:38.470165+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-06-22T20:20:22.388514+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc4 |
| 2024-06-22T20:20:21.556631+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc4 |
| 2024-06-22T19:56:38.542679+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | None | 34.0.0rc4 |
| 2024-06-22T04:56:15.842958+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc4 |
| 2024-06-22T04:56:15.043025+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc4 |
| 2024-06-22T04:32:33.702847+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | None | 34.0.0rc4 |
| 2024-06-21T12:14:28.481276+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc4 |
| 2024-06-21T12:14:26.754502+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc4 |
| 2024-06-21T11:31:23.894186+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | None | 34.0.0rc4 |
| 2024-02-01T04:43:40.226006+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc2 |
| 2024-02-01T04:43:39.402713+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc2 |
| 2024-02-01T04:06:28.879218+00:00 | Debian Oval Importer | Fixing | VCID-sfe6-46dt-aaah | None | 34.0.0rc2 |
| 2024-01-31T18:09:59.176492+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc2 |
| 2024-01-31T18:09:58.353418+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc2 |
| 2024-01-31T17:48:29.573353+00:00 | Debian Oval Importer | Fixing | VCID-zzv2-5d1a-aaan | None | 34.0.0rc2 |
| 2024-01-31T09:06:37.434424+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.0rc2 |
| 2024-01-31T09:06:35.662602+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 34.0.0rc2 |
| 2024-01-31T08:23:50.091719+00:00 | Debian Oval Importer | Affected by | VCID-7b2j-s3g7-aaak | None | 34.0.0rc2 |