Slackware: Security Advisory (SSA:2008-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : bzip2 on SL3.x, SL4.x, SL5.x i386/x86_64

A buffer over-read flaw was discovered in the bzip2 decompression routine. This issue could cause an application linked against the libbz2 library to crash when decompressing malformed archives. CVE-2008-1372 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientifi...

Scientific Linux Security Update : bzip2 on SL6.x i386/x86_64

An integer overflow flaw was discovered in the bzip2 decompression routine. This issue could, when decompressing malformed archives, cause bzip2, or an application linked against the libbz2 library, to crash or, potentially, execute arbitrary code. CVE-2010-0405 All running applications using the...

Scientific Linux Security Update : bzip2 on SL3.x, SL4.x, SL5.x i386/x86_64

An integer overflow flaw was discovered in the bzip2 decompression routine. This issue could, when decompressing malformed archives, cause bzip2, or an application linked against the libbz2 library, to crash or, potentially, execute arbitrary code. CVE-2010-0405 All running applications using the...

xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel

The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service memory consumption via a large 1 bzip2 or 2 lzma compressed kernel image...

DEBIAN-CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

Design/Logic Flaw

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

PT-2012-1206 · Apache · Apache Commons Compress

Name of the Vulnerable Software and Affected Versions: Apache Commons Compress versions prior to 1.4.1 Description: The issue concerns a problem with the sorting algorithms in the bzip2 compressing stream, specifically in the BZip2CompressorOutputStream function of Apache Commons Compress. This...

Fedora Update for apache-commons-compress FEDORA-2012-8465

Check for the Version of apache-commons-compress OpenVAS Vulnerability Test Fedora Update for apache-commons-compress FEDORA-2012-8465 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Apache Commons Compress和Apache Ant拒绝服务漏洞

BUGTRAQ ID: 53676 CVE ID: CVE-2012-2098 Apache Commons Compress库定义了一个API，可处理ar、cpio、Unix dump、tar、zip、gzip、XZ、Pack200、bzip2文件。Apache Ant，是一个将软件编译、测试、部署等步骤联系在一起加以自动化的一个工具，大多用于Java环境中的软件开发。 Apache Commons Compress 1.4.1之前版本在使用bzip2压缩文件时存在安全漏洞，可通过发送到BZip2CompressorOutputStream类的特制文件利用此漏洞消耗系统资源，造成拒绝服...

VMware ESXi/ESX patches address several security issues (VMSA-2012-0005)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0005. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0005 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

The remote ESXi is missing one or more security related Updates from VMSA-2012-0005. Summary VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues Relevant releases VMware vCenter Server 5.0 VMware vSphere Client 5.0 VMware...

[USN-1308-1] bzip2 vulnerability

========================================================================== Ubuntu Security Notice USN-1308-1 December 14, 2011 bzip2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

bzip2 bzexe symbolic links vulnerability

Insecure temporary files creation...

Ubuntu Update for bzip2 USN-1308-1

Ubuntu Update for Linux kernel vulnerabilities USN-1308-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13081.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for bzip2 USN-1308-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : bzip2 vulnerability (USN-1308-1)

vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable. Note that Tenable Network Security has extracted the preceding description...

USN-1308-1: bzip2 vulnerability

vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable...