Search for packages
| purl | pkg:deb/debian/bzip2@1.0.6-4 |
| Next non-vulnerable version | 1.0.6-9.2~deb10u1 |
| Latest non-vulnerable version | 1.0.6-9.2~deb10u1 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-8urm-9ubj-aaac
Aliases: CVE-2019-12900 |
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-ftyp-se1c-aaab
Aliases: CVE-2016-3189 |
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-an3m-4v53-aaaa | The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory. |
CVE-2011-4089
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T14:55:13.409843+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:21:35.895848+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:33:59.100111+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T01:07:02.443324+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.1.3 |
| 2025-06-20T22:24:41.174102+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | None | 36.1.3 |
| 2025-06-20T22:00:41.819064+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.1.3 |
| 2025-06-08T13:16:44.583720+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T07:48:40.617122+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:14:42.886482+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:28:02.541939+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:29:38.479463+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.1.0 |
| 2025-06-07T15:48:55.884319+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | None | 36.1.0 |
| 2025-06-07T15:24:16.098182+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.1.0 |
| 2025-04-12T21:52:54.609878+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:47:12.638948+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:04:42.408425+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T06:21:08.055043+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:47:16.703574+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:00:21.332958+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T17:07:18.220005+00:00 | Debian Oval Importer | Affected by | VCID-8urm-9ubj-aaac | None | 36.0.0 |
| 2025-04-07T14:19:44.235080+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | None | 36.0.0 |
| 2025-04-07T13:55:34.092873+00:00 | Debian Oval Importer | Affected by | VCID-ftyp-se1c-aaab | None | 36.0.0 |
| 2024-11-28T13:48:23.607770+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-10-14T00:37:00.462439+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-09-21T04:23:30.391302+00:00 | Debian Oval Importer | Fixing | VCID-an3m-4v53-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |