ZeroDay Findings
Sign inSign up

Findings

CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block end…

Published Jun 30, 2016 · updated Oct 14, 2026 · bzip bzip2

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 30, 2016 · NIST NVD

    Detected

    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

Affected

  • cpe bzip/bzip21.0.6
  • cpe python/pythonversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2016-3189

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2016-3189

    30-day exploitation probability 15.6%

    first.org
  • NIST NVDVulnerability recordCVE-2016-3189

    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

    nvd.nist.gov
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References

CVE-2016-3189 · ZeroDay Findings