9.8
Critical
CVE-2019-12900 BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors
Description
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| RUGGEDCOM ROX MX5000 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX MX5000RE 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1400 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1500 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1501 2.17 | earliest → < 2.17.0 | 2.17.0 |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM ROX RX1510 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1511 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1512 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1524 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1536 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX5000 2.17 | earliest → < 2.17.0 | 2.17.0 |
References
- [debian-lts-announce] 20190624 [SECURITY] [DLA 1833-1] bzip2 security update lists.debian.org
- USN-4038-2 usn.ubuntu.com
- USN-4038-1 usn.ubuntu.com
- 20190715 [slackware-security] bzip2 (SSA:2019-195-01) seclists.org
- [debian-lts-announce] 20190718 [SECURITY] [DLA 1833-2] bzip2 regression update lists.debian.org
- openSUSE-SU-2019:1781 lists.opensuse.org
- FreeBSD-SA-19:18 security.FreeBSD.org
- 20190806 FreeBSD Security Advisory FreeBSD-SA-19:18.bzip2 seclists.org
- openSUSE-SU-2019:1918 lists.opensuse.org
- USN-4146-1 usn.ubuntu.com
- USN-4146-2 usn.ubuntu.com
- [debian-lts-announce] 20191010 [SECURITY] [DLA 1953-1] clamav security update lists.debian.org
- [debian-lts-announce] 20191014 [SECURITY] [DLA 1953-2] clamav regression update lists.debian.org
- openSUSE-SU-2019:2595 lists.opensuse.org
- openSUSE-SU-2019:2597 lists.opensuse.org
- [kafka-users] 20200413 CVEs for the dependency software guava and rocksdbjni of Kafka lists.apache.org
- www.oracle.com www.oracle.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- gitlab.com gitlab.com
- support.f5.com support.f5.com
- [flink-user] 20210716 Flink 1.13.1 - Vulnerabilities CVE-2019-12900 for librocksdbjni lists.apache.org
- [flink-user] 20210717 Re: Flink 1.13.1 - Vulnerabilities CVE-2019-12900 for librocksdbjni lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated