CVE-2016-3189Medium· 6.5▾ SunlitUse-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 3.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
16%
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
bzip2 = 1.0.6python >= 3.7.0, < 3.7.13python >= 3.8.0, < 3.8.13python >= 3.9.0, < 3.9.11python >= 3.10.0, < 3.10.3Upgrade past the affected range:
python 3.10.3Connected by shared product, vendor, weakness, or advisory.
CVE-2019-12900Critical· 9.8BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVE-2020-11656Critical· 9.8In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVE-2020-13630High· 7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2021-20227Medium· 5.5A flaw was found in SQLite's SELECT query functionality (src/select.c)
CVE-2021-3516High· 7.8There's a flaw in libxml2's xmllint in versions before 2.9.11
CVE-2021-3518High· 8.8There's a flaw in libxml2 in versions before 2.9.11