Critical · published June 20, 2019
🔥 An out-of-bounds write in bzip2 can turn your data into a ticking time bomb! Think of this vulnerability like a waiter trying to serve too many dishes at once, overcrowding the table and spilling food everywhere. With too many selectors, bzip2 can end up writing data to unintended spaces, leading to a feast of chaos! An attacker could exploit this vulnerability to overwrite critical memory regions, potentially leading to crashes or even arbitrary code execution. This could put your entire system at risk, allowing attackers to manipulate data or take control of systems with devastating consequences.
Think of this vulnerability like a waiter trying to serve too many dishes at once, overcrowding the table and spilling food everywhere. With too many selectors, bzip2 can end up writing data to unintended spaces, leading to a feast of chaos! The CVE-2019-12900 vulnerability in bzip2's BZ2_decompress function allows for an out-of-bounds write when handling excessive selectors, which can lead to memory corruption or execution of arbitrary code.
An attacker could exploit this vulnerability to overwrite critical memory regions, potentially leading to crashes or even arbitrary code execution. This could put your entire system at risk, allowing attackers to manipulate data or take control of systems with devastating consequences. To protect your systems, upgrade bzip2 to version 1.0.8 or later immediately. Ensure that you're also auditing any applications that rely on bzip2 for data compression or decompression functions. You've got this, security hero! With these steps, you'll keep your systems safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| bzip/bzip2 | ≤ 1.0.6 | — |
| debian/debian_linux | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| freebsd/freebsd | all versions | — |
| python/python | ≥ 3.7.0, < 3.7.13 | 3.7.13 |
| python/python | ≥ 3.8.0, < 3.8.13 | 3.8.13 |
| python/python | ≥ 3.9.0, < 3.9.11 | 3.9.11 |
| python/python | ≥ 3.10.0, < 3.10.3 | 3.10.3 |