CVE-2019-12900CWE-787

CVE-2019-12900

Critical · published June 20, 2019

CVSS v3.1
9.8
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

🔥 An out-of-bounds write in bzip2 can turn your data into a ticking time bomb! Think of this vulnerability like a waiter trying to serve too many dishes at once, overcrowding the table and spilling food everywhere. With too many selectors, bzip2 can end up writing data to unintended spaces, leading to a feast of chaos! An attacker could exploit this vulnerability to overwrite critical memory regions, potentially leading to crashes or even arbitrary code execution. This could put your entire system at risk, allowing attackers to manipulate data or take control of systems with devastating consequences.

Put simply

Think of this vulnerability like a waiter trying to serve too many dishes at once, overcrowding the table and spilling food everywhere. With too many selectors, bzip2 can end up writing data to unintended spaces, leading to a feast of chaos! The CVE-2019-12900 vulnerability in bzip2's BZ2_decompress function allows for an out-of-bounds write when handling excessive selectors, which can lead to memory corruption or execution of arbitrary code.

What to do

An attacker could exploit this vulnerability to overwrite critical memory regions, potentially leading to crashes or even arbitrary code execution. This could put your entire system at risk, allowing attackers to manipulate data or take control of systems with devastating consequences. To protect your systems, upgrade bzip2 to version 1.0.8 or later immediately. Ensure that you're also auditing any applications that rely on bzip2 for data compression or decompression functions. You've got this, security hero! With these steps, you'll keep your systems safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.07977 · 94.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2019-06-20T03:15Z
Affected products (37)
ProductVersionsFixed in
bzip/bzip2≤ 1.0.6—
debian/debian_linuxall versions—
opensuse/leapall versions—
opensuse/leapall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
python/python≥ 3.7.0, < 3.7.133.7.13
python/python≥ 3.8.0, < 3.8.133.8.13
python/python≥ 3.9.0, < 3.9.113.9.11
python/python≥ 3.10.0, < 3.10.33.10.3
References (48)
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html · [email protected]http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html · [email protected]http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html · [email protected]https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc · [email protected]https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E · [email protected]https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E · [email protected]https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E · [email protected]https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html · [email protected]https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html · [email protected]https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html · [email protected]https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html · [email protected]https://seclists.org/bugtraq/2019/Aug/4 · [email protected]https://seclists.org/bugtraq/2019/Jul/22 · [email protected]https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc · [email protected]https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS · [email protected]https://usn.ubuntu.com/4038-1/ · [email protected]https://usn.ubuntu.com/4038-2/ · [email protected]https://usn.ubuntu.com/4146-1/ · [email protected]https://usn.ubuntu.com/4146-2/ · [email protected]https://www.oracle.com/security-alerts/cpuoct2020.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html · af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html · af854a3a-2127-422b-91ae-364da2661108https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html · af854a3a-2127-422b-91ae-364da2661108https://seclists.org/bugtraq/2019/Aug/4 · af854a3a-2127-422b-91ae-364da2661108https://seclists.org/bugtraq/2019/Jul/22 · af854a3a-2127-422b-91ae-364da2661108https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc · af854a3a-2127-422b-91ae-364da2661108https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4038-1/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4038-2/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4146-1/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4146-2/ · af854a3a-2127-422b-91ae-364da2661108https://www.oracle.com/security-alerts/cpuoct2020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-202008.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 19 JUN 22:07Z
    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors
    cvelistv5