Debian/rust-bzip2: high 7.5
The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates
Action: Upgrade rust-bzip2 to 0.4.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.4-1 | - |
Fixed versions
| 0.4.4-1 |
Sources
- osv: DEBIAN-CVE-2023-22895#Debian:14/rust-bzip2
- https://security-tracker.debian.org/tracker/CVE-2023-22895
published · modified · JSON