Debian/bzip2: unknown

bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test

Action: Upgrade bzip2 to 1.0.5-0.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1372#Debian:13/bzip2
• https://security-tracker.debian.org/tracker/CVE-2008-1372

published 2008-03-18T21:44:00Z · modified 2026-10-23T17:47:31.951707055Z · JSON