← Back

CVE-2019-12900

nvd nist
Published: Jun 19, 2019Modified: Jun 9, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Affected (37)

Products: Bzip: Bzip2 · Debian: Debian Linux · Opensuse: Leap · +3 more
Show all products
Bzip: Bzip2 · Debian: Debian Linux · Opensuse: Leap · Canonical: Ubuntu Linux · Freebsd: Freebsd · Python: Python
Bzip
1 product
Bzip2
Debian
1 product
Debian Linux
Opensuse
1 product
Leap
Canonical
1 product
Ubuntu Linux
Freebsd
1 product
Freebsd
Python
1 product
Python
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Bzip2
Up to 1.0.6
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 8.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Leap
Version 15.0
Leap
Version 15.1
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 19.04
Configuration E
24 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 11.2
Freebsd
Version 11.2 p10
Freebsd
Version 11.2 p11
Freebsd
Version 11.2 p12
Freebsd
Version 11.2 p2
Freebsd
Version 11.2 p3
Freebsd
Version 11.2 p4
Freebsd
Version 11.2 p5
Freebsd
Version 11.2 p6
Freebsd
Version 11.2 p7
Freebsd
Version 11.2 p8
Freebsd
Version 11.2 p9
Freebsd
Version 11.2 rc3
Freebsd
Version 11.3
Freebsd
Version 11.3 p1
Freebsd
Version 12.0
Freebsd
Version 12.0 p1
Freebsd
Version 12.0 p2
Freebsd
Version 12.0 p3
Freebsd
Version 12.0 p4
Freebsd
Version 12.0 p5
Freebsd
Version 12.0 p6
Freebsd
Version 12.0 p7
Freebsd
Version 12.0 p8
Configuration F
4 vulnerable
Vulnerable SoftwareAffected Versions
Python
Python
From 3.10.0 to 3.10.3
Python
From 3.7.0 to 3.7.13
Python
From 3.8.0 to 3.8.13
Python
From 3.9.0 to 3.9.11

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (46)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListPatchThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.