CVE-2016-3189
30.06.2016, 17:59
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| bzip | bzip2 | 1.0.6 |
| python | python | 3.7.0 ≤ 𝑥 < 3.7.13 |
| python | python | 3.8.0 ≤ 𝑥 < 3.8.13 |
| python | python | 3.9.0 ≤ 𝑥 < 3.9.11 |
| python | python | 3.10.0 ≤ 𝑥 < 3.10.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.0 ≤ 𝑥 < V3.1.5 | ADP |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.0 ≤ 𝑥 < V3.1.5 | ADP |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.0 ≤ 𝑥 < V3.1.5 | ADP |
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bzip2 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| bzip2-doc |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libbz2-1 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libbz2-1-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libbz2-devel |
|
Common Weakness Enumeration
References