CVE-2016-3189PSF-2016-5
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
No affected packages have been listed by the sources.
References 25
openwall.com
securitytracker.com
securityfocus.com
security.gentoo.org
lists.debian.org
seclists.org
security.freebsd.org
lists.apache.org
- thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73@<dev.kafka.apache.org>
- thread.html/r481cda41fefb03e04c51484ed14421d812e5ce9e0972edff10f37260@<jira.kafka.apache.org>
- thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6708b964464b301@<jira.kafka.apache.org>
- thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@<users.kafka.apache.org>
- thread.html/r19b4a70ac52093115fd71d773a7a4f579599e6275a13cfcf6252c3e3@<jira.kafka.apache.org>
- thread.html/rffebcbeaace56ff1fed7916700d2f414ca1366386fb1293e99b3e31e@<jira.kafka.apache.org>
- thread.html/r5f80cf3ade5bb73410643e885fe6b7bf9f0222daf3533e42c7ae240c@<jira.kafka.apache.org>
- thread.html/r4ad2ea01354e394b7fa8c78a184b7e1634d51be9bc0e9e4d7e6c9305@<jira.kafka.apache.org>
- thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6af@<dev.kafka.apache.org>
- thread.html/r5f7ac2bd631ccb12ced65b71ff11f94e76d05b22000795e4a7b61203@<jira.kafka.apache.org>