CVE-2016-3189Medium· 6.5▾ SunlitUse-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 3.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
16%
16% → 16%
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
bzip2 = 1.0.6python >= 3.7.0, < 3.7.13python >= 3.8.0, < 3.8.13python >= 3.9.0, < 3.9.11python >= 3.10.0, < 3.10.3Upgrade past the affected range:
python 3.10.3Connected by shared product, vendor, weakness, or advisory.
CVE-2019-12900Critical· 9.8BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVE-2020-11656Critical· 9.8In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVE-2020-13630High· 7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2023-45898High· 7.8The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.
CVE-2023-45322Medium· 6.5libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails
CVE-2023-4813Medium· 5.9A flaw has been identified in glibc