Search for vulnerabilities
Vulnerability details: VCID-8urm-9ubj-aaac
Vulnerability ID VCID-8urm-9ubj-aaac
Aliases CVE-2019-12900
Summary BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Status Published
Exploitability 0.5
Weighted Severity 8.8
Risk 4.4
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-787 Out-of-bounds Write
CWE-1214 Data Integrity Issues
System Score Found at
cvssv3.1 9.8 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html
cvssv3.1 9.8 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html
cvssv3.1 9.8 http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html
cvssv3.1 9.8 http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html
cvssv3.1 9.8 http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
ssvc Track http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
cvssv3.1 9.8 http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
ssvc Track http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-12900.html
cvssv3 3.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
cvssv3 4.0 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
cvssv3 4.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
epss 0.01097 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01237 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01252 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01252 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01275 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01275 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01275 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01275 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01275 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01396 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01435 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01451 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01451 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01451 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01451 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.01964 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.02008 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.03036 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.03757 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.04022 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
epss 0.06071 https://api.first.org/data/v1/epss?cve=CVE-2019-12900
generic_textual Medium https://bugs.launchpad.net/ubuntu/+source/bzip2/+bug/1834494
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=1724459
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12900
cvssv3 8.4 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 9.8 https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
ssvc Track https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
cvssv3.1 5.9 https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E
cvssv3.1 9.8 https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html
ssvc Track https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html
cvssv3.1 9.8 https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html
ssvc Track https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html
cvssv3.1 9.8 https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html
ssvc Track https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html
cvssv3.1 9.8 https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html
ssvc Track https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2019-12900
cvssv3 9.8 https://nvd.nist.gov/vuln/detail/CVE-2019-12900
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2019-12900
cvssv3.1 9.8 https://seclists.org/bugtraq/2019/Aug/4
ssvc Track https://seclists.org/bugtraq/2019/Aug/4
cvssv3.1 9.8 https://seclists.org/bugtraq/2019/Jul/22
ssvc Track https://seclists.org/bugtraq/2019/Jul/22
cvssv3.1 9.8 https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
ssvc Track https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
cvssv3.1 9.8 https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS
ssvc Track https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS
generic_textual Medium https://ubuntu.com/security/notices/USN-4038-1
generic_textual Medium https://ubuntu.com/security/notices/USN-4038-2
generic_textual Medium https://ubuntu.com/security/notices/USN-4038-3
generic_textual Medium https://ubuntu.com/security/notices/USN-4038-4
generic_textual Medium https://ubuntu.com/security/notices/USN-4146-1
generic_textual Medium https://ubuntu.com/security/notices/USN-4146-2
cvssv3.1 9.8 https://usn.ubuntu.com/4038-1/
ssvc Track https://usn.ubuntu.com/4038-1/
cvssv3.1 9.8 https://usn.ubuntu.com/4038-2/
ssvc Track https://usn.ubuntu.com/4038-2/
cvssv3.1 9.8 https://usn.ubuntu.com/4146-1/
ssvc Track https://usn.ubuntu.com/4146-1/
cvssv3.1 9.8 https://usn.ubuntu.com/4146-2/
ssvc Track https://usn.ubuntu.com/4146-2/
cvssv3.1 9.8 https://www.oracle.com/security-alerts/cpuoct2020.html
generic_textual CRITICAL https://www.oracle.com/security-alerts/cpuoct2020.html
ssvc Track https://www.oracle.com/security-alerts/cpuoct2020.html
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html
http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-12900.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
https://api.first.org/data/v1/epss?cve=CVE-2019-12900
https://bugs.launchpad.net/ubuntu/+source/bzip2/+bug/1834494
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12900
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774@%3Cuser.flink.apache.org%3E
https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4@%3Cuser.flink.apache.org%3E
https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E
https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html
https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html
https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html
https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html
https://seclists.org/bugtraq/2019/Aug/4
https://seclists.org/bugtraq/2019/Jul/22
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS
https://support.f5.com/csp/article/K68713584?utm_source=f5support&utm_medium=RSS
https://ubuntu.com/security/notices/USN-4038-1
https://ubuntu.com/security/notices/USN-4038-2
https://ubuntu.com/security/notices/USN-4038-3
https://ubuntu.com/security/notices/USN-4038-4
https://ubuntu.com/security/notices/USN-4146-1
https://ubuntu.com/security/notices/USN-4146-2
https://usn.ubuntu.com/4038-1/
https://usn.ubuntu.com/4038-2/
https://usn.ubuntu.com/4146-1/
https://usn.ubuntu.com/4146-2/
https://www.oracle.com/security-alerts/cpuoct2020.html
1724459 https://bugzilla.redhat.com/show_bug.cgi?id=1724459
2332075 https://bugzilla.redhat.com/show_bug.cgi?id=2332075
930886 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930886
cpe:2.3:a:bzip:bzip2:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:bzip:bzip2:*:*:*:*:*:*:*:*
cpe:2.3:a:python:python:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p11:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p11:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p12:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p12:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
CVE-2019-12900 https://nvd.nist.gov/vuln/detail/CVE-2019-12900
RHSA-2024:10803 https://access.redhat.com/errata/RHSA-2024:10803
RHSA-2024:8922 https://access.redhat.com/errata/RHSA-2024:8922
RHSA-2025:0733 https://access.redhat.com/errata/RHSA-2025:0733
RHSA-2025:0925 https://access.redhat.com/errata/RHSA-2025:0925
RHSA-2025:1154 https://access.redhat.com/errata/RHSA-2025:1154
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12900.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2019-12900
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2019-12900
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2019-12900
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://seclists.org/bugtraq/2019/Aug/4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://seclists.org/bugtraq/2019/Aug/4
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://seclists.org/bugtraq/2019/Jul/22
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://seclists.org/bugtraq/2019/Jul/22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://usn.ubuntu.com/4038-1/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://usn.ubuntu.com/4038-1/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://usn.ubuntu.com/4038-2/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://usn.ubuntu.com/4038-2/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://usn.ubuntu.com/4146-1/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://usn.ubuntu.com/4146-1/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://usn.ubuntu.com/4146-2/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://usn.ubuntu.com/4146-2/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://www.oracle.com/security-alerts/cpuoct2020.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-06-09T15:54:12Z/ Found at https://www.oracle.com/security-alerts/cpuoct2020.html
Exploit Prediction Scoring System (EPSS)
Percentile 0.76076
EPSS Score 0.01097
Published At April 2, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.