CyberSecBulletin

Bzip2 Project vulnerabilities

We track 1 vulnerability in Bzip2 Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Bzip2 Project vulnerabilities

  • 7.5 High severity

    Bzip2: Integer Overflow or Wraparound

    CVE-2023-22895Bzip2 ProjectEPSS 1.29%

    The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.