ZeroDay Findings
Sign inSign up

Findings

CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Published Jun 19, 2019 · updated Oct 14, 2026 · bzip bzip2

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 19, 2019 · NIST NVD

    Detected

    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

  2. Oct 14, 2026 · NIST NVD

    Updated

    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Affected

  • cpe bzip/bzip2version unspecified
  • cpe canonical/ubuntu linux12.04
  • cpe canonical/ubuntu linux14.04
  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux18.04
  • cpe debian/debian linux8.0
  • cpe freebsd/freebsd11.2
  • cpe opensuse/leap15.0
  • cpe opensuse/leap15.1
  • cpe python/pythonversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2019-12900

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-12900

    30-day exploitation probability 8.0%

    first.org
  • NIST NVDVulnerability recordCVE-2019-12900

    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

    nvd.nist.gov
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References