CVE-2005-1260
Fixed in a distro release EPSS 6%
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
Products: bzip2, canonical ubuntu_linux, debian_linux, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bzip2 | 1.0.2-7 |
| Debian 13 | bzip2 | 1.0.2-7 |
| Debian 14 | bzip2 | 1.0.2-7 |
| Debian 3.0 | bzip2 | 1.0.2-1.woody5 |
| Red Hat Enterprise Linux 3 | bzip2 | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 3 | bzip2-debuginfo | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 3 | bzip2-devel | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 3 | bzip2-libs | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 4 | bzip2 | 0:1.0.2-13.EL4.3 |
| Red Hat Enterprise Linux 4 | bzip2-debuginfo | 0:1.0.2-13.EL4.3 |
| Red Hat Enterprise Linux 4 | bzip2-devel | 0:1.0.2-13.EL4.3 |
| Red Hat Enterprise Linux 4 | bzip2-libs | 0:1.0.2-13.EL4.3 |