CVE-2011-4089
Fixed in a distro release EPSS 1%
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.
Products: bzip2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bzip2 | 1.0.6-1 |
| Debian 13 | bzip2 | 1.0.6-1 |
| Debian 14 | bzip2 | 1.0.6-1 |