CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Published Jun 19, 2019 · updated Oct 14, 2026 · bzip bzip2
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Timeline
Detection, updates, and resolution for this record.
Jun 19, 2019 · NIST NVD
Detected
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Oct 14, 2026 · NIST NVD
Updated
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Affected
- cpe bzip/bzip2version unspecified
- cpe canonical/ubuntu linux12.04
- cpe canonical/ubuntu linux14.04
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe debian/debian linux8.0
- cpe freebsd/freebsd11.2
- cpe opensuse/leap15.0
- cpe opensuse/leap15.1
- cpe python/pythonversion unspecified
Sources
- CVE.orgCVE-2019-12900
Official CVE identifier
cve.org - NIST NVDCVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html
Packet Storm link already published on the finding.
packetstormsecurity.com