logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2009-1884

Description

Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391.


Affected Package


OS OS Version Package Name Package Version
ubuntu 08.10 libcompress-raw-bzip2-perl any
ubuntu upstream libcompress-raw-bzip2-perl 2.020-1

Related