Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : bzip2 vulnerability (USN-8685-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8685-1 advisory. It was discovered that bzip2 did not properly manage memory under certain circumstances. A...

CLEANSTART-2026-AS77854 Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression)

Security vulnerability affects the apache-hive package. The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data which affects the allocation size used during decompression...

UBUNTU-CVE-2026-106565

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565

A flaw was found in ImageMagick. A remote attacker could trigger a Denial of Service DoS by providing a specially crafted bzip2-compressed image file. Due to a missing End-of-File EOF check during image decompression, the application can enter an infinite loop, exhausting system resources and...

DEBIAN-CVE-2026-106565

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in the bzip2 image data processing. An attacker can cause the application to enter an infinite loop and exhaust system resources by submitting a specially crafted bzip2-compressed image file. Details Denial of...

CVE-2026-106565

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

EUVD-2026-94380

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-106565

The ImageMagick image manipulation software contains a vulnerability where a missing end-of-file check while processing bzip2-compressed image data can trigger an infinite loop . This flaw allows for the exhaustion of processing resources , potentially impacting system availability. The issue is ...

PT-2026-107547

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A missing end-of-file check occurs when reading bzip2-compressed image data, which can lead to an infinite loop and the exhaustion of processing...

CVE-2026-106565: Uncontrolled Resource Consumption

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

Linux Distros Unpatched Vulnerability : CVE-2026-106565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check whil...

Astra Linux – Vulnerability in Netty

The Bzip2 decompression decoder function does not allow setting size restrictions on the decompressed output data which affects the allocation size used during decompression. This affects all users of Bzip2Decoder. Malicious inputs can trigger an OOME, thereby causing a DoS attack...

CLEANSTART-2026-JO91864 Use-after-free vulnerability in bzip2recover in bzip2 1

Security vulnerability affects the bzip2 package. Use-after-free vulnerability in bzip2recover in bzip2 1...

CLEANSTART-2026-PN21117 BZ2_decompress in decompress

Security vulnerability affects the bzip2 package. BZ2decompress in decompress...

Rocky Linux 9 [CIQ] Security Update: bzip2 / bzip2-debuginfo / bzip2-debugsource / bzip2-devel / etc (crlsa-2025_0925)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250925 advisory. bzip2: bzip2: Data integrity error when decompressing with data integrity tests fail. CVE-2019-12900 Tenable has extracted the preceding description block directly...