CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a...
CVE-2016-3189 is a medium vulnerability (CVSS 6.5) in Bzip Bzip2, published June 30, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.7%, the 96th percentile. Fixed in bzip2 1.0.6-r5.
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2016-4230
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
EUVD-2016-4230- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mg3q-2g68-qp7w
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a...
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
GHSA-mg3q-2g68-qp7w- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVALPINE-CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
ALPINE-CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2016-3189
CVE-2016-3189 does not affect BellSoft software
- Record
BELL-CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 18 moreShow less
OSV
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
DEBIAN-CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2025-10
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a...
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
JLSEC-2025-10- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
UBUNTU-CVE-2016-3189- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1776956583 No score
bzip2: Fix of 2 CVEs
- CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present
- CVE-2016-3189: fix use-after-free in bzip2recover
- Record
CLSA-2026-1776956583- Updated
- 2026-11-02
OSVCLSA-2026-1776961553 No score
bzip2: Fix of 2 CVEs
- CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present
- CVE-2016-3189: fix use-after-free in bzip2recover
- Record
CLSA-2026-1776961553- Updated
- 2026-11-02
OSVCLSA-2026-1776965760 No score
bzip2: Fix of 2 CVEs
- CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present
- CVE-2016-3189: fix use-after-free in bzip2recover
- Record
CLSA-2026-1776965760- Updated
- 2026-11-02
OSVMGASA-2016-0400 No score
Updated bzip2 packages fix security vulnerability
A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. An attacker could use this flaw by sending a specially crafted bzip2 file to recover and force the program to crash (CVE-2016-3189).
- Record
MGASA-2016-0400- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1398-1 No score
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:1398-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1435-1 No score
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:1435-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10667-1 No score
bzip2-1.0.8-3.2 on GA media
These are all security issues fixed in the bzip2-1.0.8-3.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10667-1- Updated
- 2026-11-02
OSVPSF-2016-5 No score
Windows: vulnerable bzip2 1.0.6
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
- Record
PSF-2016-5- Updated
- 2026-11-02
OSVSUSE-SU-2019:1206-1 No score
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
- Record
SUSE-SU-2019:1206-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1206-2 No score
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
- Record
SUSE-SU-2019:1206-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:14122-1 No score
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083).
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
- Record
SUSE-SU-2019:14122-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:1955-1 No score
Security update for bzip2
This update for bzip2 fixes the following issues:
Security issue fixed:
- CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083).
- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
- Record
SUSE-SU-2019:1955-1- Updated
- 2026-11-02
OSVUSN-4038-1 No score
bzip2 vulnerabilities
Aladdin Mubaied discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-3189)
It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-12900)
- Record
USN-4038-1- Updated
- 2026-11-02
OSVUSN-4038-2 No score
bzip2 vulnerabilities
USN-4038-1 fixed several vulnerabilities in bzip2. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
Aladdin Mubaied discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-3189)
It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-12900)
- Record
USN-4038-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bzip2Alpine:v3.10 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.11 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.12 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.13 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.14 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.15 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.16 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.17 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.18 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.19 |
before 1.0.6-r5 | 1.0.6-r5 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bzip2Alpine:v3.20 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.21 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.22 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.23 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.24 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.4 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.5 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.6 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.7 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.8 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2Alpine:v3.9 |
before 1.0.6-r5 | 1.0.6-r5 |
bzip2TuxCare:CentOS:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2-develTuxCare:CentOS:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2-libsTuxCare:CentOS:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2TuxCare:OracleLinux:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2-develTuxCare:OracleLinux:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2-libsTuxCare:OracleLinux:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2TuxCare:RHEL:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2-develTuxCare:RHEL:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2-libsTuxCare:RHEL:7 |
before 1.0.6-13.el7.tuxcare.els1 | 1.0.6-13.el7.tuxcare.els1 |
bzip2Debian:12 |
before 1.0.6-8.1 | 1.0.6-8.1 |
bzip2Debian:13 |
before 1.0.6-8.1 | 1.0.6-8.1 |
bzip2Debian:14 |
before 1.0.6-8.1 | 1.0.6-8.1 |
bzip2Debian:8 |
before 1.0.6-7+deb8u1, plus listed versions 1.0.6-7 |
1.0.6-7+deb8u1 |
Bzip2_jllJulia |
before 1.0.7+0 | 1.0.7+0 |
Python_jllJulia |
before 3.10.7+0 | 3.10.7+0 |
bzip2Mageia:5 |
before 1.0.6-7.1.mga5 | 1.0.6-7.1.mga5 |
bzip2SUSE:Linux Enterprise Module for Basesystem 15 |
before 1.0.6-5.3.1 | 1.0.6-5.3.1 |
bzip2SUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 1.0.6-5.3.1 | 1.0.6-5.3.1 |
bzip2SUSE:Linux Enterprise Point of Sale 11 SP3 |
before 1.0.5-34.256.5.1 | 1.0.5-34.256.5.1 |
bzip2SUSE:Linux Enterprise Server 11 SP4-LTSS |
before 1.0.5-34.256.5.1 | 1.0.5-34.256.5.1 |
bzip2SUSE:OpenStack Cloud 7 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:OpenStack Cloud 8 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Desktop 12 SP4 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server 12 SP1-LTSS |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server 12 SP2-LTSS |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server 12 SP2-BCL |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server 12 SP3-LTSS |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server 12 SP4 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Enterprise Storage 4 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2SUSE:Enterprise Storage 5 |
before 1.0.6-30.5.1 | 1.0.6-30.5.1 |
bzip2Ubuntu:Pro:14.04:LTS |
before 1.0.6-5ubuntu0.1~esm1, plus listed versions 1.0.6-41.0.6-5 |
1.0.6-5ubuntu0.1~esm1 |
bzip2Ubuntu:16.04:LTS |
before 1.0.6-8ubuntu0.1, plus listed versions 1.0.6-8 |
1.0.6-8ubuntu0.1 |
bzip2Ubuntu:18.04:LTS |
before 1.0.6-8.1ubuntu0.1, plus listed versions 1.0.6-8.1 |
1.0.6-8.1ubuntu0.1 |
bzip2openSUSE:Leap 15.0 |
before 1.0.6-lp150.4.3.1 | 1.0.6-lp150.4.3.1 |
bzip2openSUSE:Leap 15.1 |
before 1.0.6-lp151.5.3.1 | 1.0.6-lp151.5.3.1 |
bzip2openSUSE:Tumbleweed |
before 1.0.8-3.2 | 1.0.8-3.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | created | CVE List, EUVD, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2016/06/20/1
securitytracker.com/id/1036132
securityfocus.com/bid/91297
security.gentoo.org/glsa/201708-08
lists.debian.org/debian-lts-announce/2019/06/msg00021.html
usn.ubuntu.com/4038-2
Show 60 moreShow less
seclists.org/bugtraq/2019/Jul/22
security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc
lists.apache.org/thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73%40%3Cdev.kafka.apache.org%3E
oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
bugzilla.redhat.com/show_bug.cgi?id=1319648
packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2016-3189
github.com/advisories/GHSA-mg3q-2g68-qp7w
security.alpinelinux.org/vuln/CVE-2016-3189
docs.bell-sw.com/security/cves/CVE-2016-3189
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776956583.html
security-tracker.debian.org/tracker/CVE-2016-3189
advisories.mageia.org/MGASA-2016-0400.html
bugs.mageia.org/show_bug.cgi?id=18742
access.redhat.com/security/cve/cve-2016-3189
bugs.python.org/issue44549
suse.com/support/update/announcement/2019/suse-su-20191206-1
bugzilla.suse.com/985657
ubuntu.com/security/CVE-2016-3189
marc.info?l=oss-security&m=146642106322396&w=2
cve.org/CVERecord?id=CVE-2016-3189
lists.opensuse.org/archives/list/[email protected]/thread/AZOAIG3ZRFB4G3OJLLK5642AFVIYJNTD