out-of-bounds write when there are many bzip2 selectors
# out-of-bounds write when there are many bzip2 selectors A malicious bzip2 payload may produce a memory corruption resulting in a denial of service and/or remote code execution. Network services or command line utilities decompressing untrusted bzip2 payloads are affected. Note that the exploitation of this bug relies on an undefined behavior that appears to be handled safely by current compilers. The Haskell libraires are vulnerable when they are built using the bundled C library source code, which is the default in most cases.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-12900US | critical9.8 | — | ||
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://scary.beasts.org/security/CESA-2008-005.htmlDISCUSSION
- https://access.redhat.com/security/cve/cve-2019-12900ADVISORY
- https://gnu.wildebeest.org/blog/mjw/2019/08/02/bzip2-and-the-cve-that-wasnt/DISCUSSION
- https://sourceware.org/git/?p=bzip2.git;a=commit;h=7ed62bfb46e87a9e878712603469440e6882b184FIX
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan