Back to Database
Status published
Medium
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service...
Vulnerability Description
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1260
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html
- https://usn.ubuntu.com/127-1/
- http://www.securityfocus.com/bid/13657
- http://www.debian.org/security/2005/dsa-741
- http://www.securityfocus.com/bid/26444
- http://secunia.com/advisories/15447
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10700
- http://secunia.com/advisories/27274
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A749
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
- http://docs.info.apple.com/article.html?artnum=307041
- http://www.vupen.com/english/advisories/2007/3525
- http://www.vupen.com/english/advisories/2007/3868
- ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc
- http://secunia.com/advisories/27643
- http://secunia.com/advisories/19183
- http://www.redhat.com/support/errata/RHSA-2005-474.html
- http://www.us-cert.gov/cas/techalerts/TA07-319A.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1
More from bzip
View All →CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds...
Unknown
0
CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers...
Unknown
0
CVE-2011-4089
The bzexe command in bzip2 1.0.5 and earlier generates compressed...
Medium
4.6
CVE-2010-0405
Integer overflow in the BZ2_decompress function in decompress.c in bzip2...
Medium
5.1
CVE-2009-1884
Off-by-one error in the bzinflate function in Bzip2.xs in the...
Medium
4.3
Affected Vendor
bzip
View all reports →Affected Software
bzip2, ubuntu linux, debian linux, mac os x
Vulnerable Versions:
0, 4.10, 5.04, 3.0, 3.1
Timeline
Official Publish:
May 19th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.