Patchwire CVEs, their patch status, and feeds to follow them

CVE-2011-4089

Fixed in a distro release EPSS 1%

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

Published 2014-04-16 · CVE record · OSV

Products: bzip2

Distro releases

ReleasePackageFixed in
Debian 12bzip21.0.6-1
Debian 13bzip21.0.6-1
Debian 14bzip21.0.6-1