CVE-2008-1372
Fixed in a distro release EPSS 5%
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Products: bzip2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bzip2 | 1.0.5-0.1 |
| Debian 13 | bzip2 | 1.0.5-0.1 |
| Debian 14 | bzip2 | 1.0.5-0.1 |
| Red Hat Enterprise Linux 2.1 | bzip2 | 0:1.0.1-5.EL2.1 |
| Red Hat Enterprise Linux 2.1 | bzip2-devel | 0:1.0.1-5.EL2.1 |
| Red Hat Enterprise Linux 2.1 | bzip2-libs | 0:1.0.1-5.EL2.1 |
| Red Hat Enterprise Linux 3 | bzip2 | 0:1.0.2-12.EL3 |
| Red Hat Enterprise Linux 3 | bzip2-debuginfo | 0:1.0.2-12.EL3 |
| Red Hat Enterprise Linux 3 | bzip2-devel | 0:1.0.2-12.EL3 |
| Red Hat Enterprise Linux 3 | bzip2-libs | 0:1.0.2-12.EL3 |
| Red Hat Enterprise Linux 4 | bzip2 | 0:1.0.2-14.el4_7 |
| Red Hat Enterprise Linux 4 | bzip2-debuginfo | 0:1.0.2-14.el4_7 |
| Red Hat Enterprise Linux 4 | bzip2-devel | 0:1.0.2-14.el4_7 |
| Red Hat Enterprise Linux 4 | bzip2-libs | 0:1.0.2-14.el4_7 |
| Red Hat Enterprise Linux 5 | bzip2 | 0:1.0.3-4.el5_2 |
| Red Hat Enterprise Linux 5 | bzip2-debuginfo | 0:1.0.3-4.el5_2 |
| Red Hat Enterprise Linux 5 | bzip2-devel | 0:1.0.3-4.el5_2 |
| Red Hat Enterprise Linux 5 | bzip2-libs | 0:1.0.3-4.el5_2 |
| openSUSE Tumbleweed | bzip2 | 1.0.8-3.2 |