{"id":"CVE-2010-0405","aliases":["BELL-CVE-2010-0405","DEBIAN-CVE-2010-0405","DSA-2112-1","EUVD-2010-0436","GHSA-44gv-7gp8-m9mw","RHSA-2010:0703","RHSA-2010:0858","openSUSE-SU-2024:10132-1","openSUSE-SU-2024:10571-1"],"status":"published","title":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0...","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03297,"percentile":0.88588,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2010-09-20T00:00:00Z","modified":"2026-10-23T17:47:23Z","fixes":[{"ecosystem":"Debian:12","package":"bzip2","fixed_in":["1.0.5-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bzip2","fixed_in":["1.0.5-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bzip2","fixed_in":["1.0.5-6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"clamav","fixed_in":["0.96.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"clamav","fixed_in":["0.96.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["0.96.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"bzip2","fixed_in":["1.0.5-1+lenny1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2-devel","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2-libs","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2-devel","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2-libs","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2-devel","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2-libs","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2-devel","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2-libs","fixed_in":["0:1.0.2-14.EL3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2-devel","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2-libs","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2-devel","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2-libs","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2-devel","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2-libs","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2-debuginfo","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2-devel","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2-libs","fixed_in":["0:1.0.2-16.el4_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bzip2","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bzip2-debuginfo","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bzip2-devel","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"bzip2","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"bzip2-debuginfo","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"bzip2-libs","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2-debuginfo","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2-devel","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2-libs","fixed_in":["0:1.0.3-6.el5_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2-debuginfo","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2-devel","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2-libs","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2-debuginfo","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2-devel","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2-libs","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2-debuginfo","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2-devel","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2-libs","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2-debuginfo","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2-devel","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2-libs","fixed_in":["0:1.0.5-7.el6_0"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"bzip2","fixed_in":["1.0.6-37.82"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1+lenny1"}]}],"versions":["1.0.5-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-14.EL3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.el4_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-6.el5_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"bzip2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-7.el6_0"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bzip2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-37.82"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-4.1"}]}],"bundled":16}],"products":[{"vendor":"bzip","product":"bzip2"},{"vendor":"libzip2","product":"libzip2"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-986-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-986-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-986-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/41452","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/42404","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/48378","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.vupen.com/english/advisories/2010/3073","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2455","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://secunia.com/advisories/42530","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://marc.info/?l=oss-security\u0026m=128506868510655\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/42529","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://secunia.com/advisories/41505","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3052","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0703.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0858.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051366.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"http://secunia.com/advisories/42405","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=627882","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201301-05.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.bzip.org/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2010/3127","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3043","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/42350","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://support.apple.com/kb/HT4581","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0405","tags":["advisory"]},{"url":"http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.3"},{"url":"http://www.bzip.org"},{"url":"http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow"},{"url":"https://github.com/advisories/GHSA-44gv-7gp8-m9mw"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2010-0405","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-0405","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0703","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0703.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0405","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0858","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0858.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2668","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2010-0405","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","status":"published","published":"2010-09-28T17:00:00Z","modified":"2024-08-07T00:45:12.275Z","updated_at":"2026-11-02T14:33:29.990758Z"}],"euvd":[{"id":"EUVD-2010-0436","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","status":"published","published":"2010-09-28T17:00:00Z","modified":"2024-08-07T00:45:12Z","updated_at":"2026-11-03T01:39:45.195177Z"}],"ghsa":[{"id":"GHSA-44gv-7gp8-m9mw","title":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0...","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","status":"published","published":"2022-05-02T06:12:33Z","modified":"2025-04-11T03:40:23Z","updated_at":"2026-11-02T15:01:06.328072Z"}],"nvd":[{"id":"CVE-2010-0405","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","status":"published","published":"2010-09-28T18:00:02.34Z","modified":"2026-06-16T23:16:05.867Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:01:52.227027Z"}],"osv":[{"id":"BELL-CVE-2010-0405","title":"CVE-2010-0405 does not affect BellSoft software","status":"withdrawn","published":"2010-09-28T18:00:00Z","modified":"2026-01-28T07:18:36.658729Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium"}],"updated_at":"2026-11-02T15:28:12.886815Z"},{"id":"CVE-2010-0405","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","status":"published","published":"2010-09-28T18:00:02Z","modified":"2026-04-10T03:41:06.684625Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-0405","description":"Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.","status":"published","published":"2010-09-28T18:00:02.34Z","modified":"2026-10-23T17:47:23.100621741Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"DSA-2112-1","title":"bzip2 - integer overflow","status":"published","published":"2010-09-20T00:00:00Z","modified":"2026-03-09T01:21:30.822777Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"openSUSE-SU-2024:10132-1","title":"bzip2-1.0.6-37.82 on GA media","description":"These are all security issues fixed in the bzip2-1.0.6-37.82 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:30:18.454234Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10571-1","title":"clamav-0.99.2-4.1 on GA media","description":"These are all security issues fixed in the clamav-0.99.2-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:35:53.010154Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2010:0703","title":"Red Hat Security Advisory: bzip2 security update","status":"published","published":"2024-09-15T18:38:07Z","modified":"2026-06-26T12:20:38.180107567Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2010:0858","title":"Red Hat Security Advisory: bzip2 security update","status":"published","published":"2024-09-15T18:38:11Z","modified":"2026-06-26T10:14:34Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}