Bzip

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-12900 Jun 19, 23:15 CRITICAL PATCH Act Now

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Python Memory Corruption Debian Canonical +7

NVD

CVSS 3.1

9.8

EPSS

8.1%

CVE-2016-3189 Jun 30, 17:59 MEDIUM This Month

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 23.7% and no vendor patch available.

Denial Of Service Python Use After Free Memory Corruption Bzip2 +1

NVD

CVSS 3.1

6.5

EPSS

23.7%

CVE-2019-12900

EPSS 8% CVSS 9.8

CRITICAL PATCH Act Now

Buffer Overflow Python Memory Corruption +9

NVD

CVE-2016-3189

EPSS 24% CVSS 6.5

MEDIUM This Month

Denial Of Service Python Use After Free +3

NVD