CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
Percentile
86.1%
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a “decompression bomb”).
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | bzip2 | < 1.0.2-7 | bzip2_1.0.2-7_all.deb |
Debian | 11 | all | bzip2 | < 1.0.2-7 | bzip2_1.0.2-7_all.deb |
Debian | 999 | all | bzip2 | < 1.0.2-7 | bzip2_1.0.2-7_all.deb |
Debian | 13 | all | bzip2 | < 1.0.2-7 | bzip2_1.0.2-7_all.deb |