vulnwire
6.5med

CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip…

Published 10 y ago · modified 24 d ago · JSON

CVSS
6.5
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
15.7%
percentile 97%
Public exploits
0
none known

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

CISA SSVC assessment

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
16 mo ago

Exploit prediction (EPSS)

15.68% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.16.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD3.16.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CNA3.16.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
  • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Classification

Weakness

References

  • openwall.com /lists/oss-security/2016/06/20/1 · mailing-list, x_refsource_MLIST, x_transferred
  • securitytracker.com /id/1036132 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /bid/91297 · vdb-entry, x_refsource_BID, x_transferred
  • security.gentoo.org /glsa/201708-08 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • lists.debian.org /debian-lts-announce/2019/06/msg00021.html · mailing-list, x_refsource_MLIST, x_transferred
  • usn.ubuntu.com /4038-2/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • usn.ubuntu.com /4038-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • seclists.org /bugtraq/2019/Jul/22 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • security.freebsd.org /advisories/FreeBSD-SA-19:18.bzip2.asc · vendor-advisory, x_refsource_FREEBSD, x_transferred
  • seclists.org /bugtraq/2019/Aug/4 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.apache.org /thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73%40%3Cdev.kafka.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r481cda41fefb03e04c51484ed14421d812e5ce9e0972edff10f37260%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6708b964464b301%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.ap · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r19b4a70ac52093115fd71d773a7a4f579599e6275a13cfcf6252c3e3%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • oracle.com /technetwork/topics/security/bulletinjul2016-3090568.html · x_refsource_CONFIRM, x_transferred
  • oracle.com /security-alerts/cpuoct2020.html · x_refsource_MISC, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=1319648 · x_refsource_CONFIRM, x_transferred
  • packetstormsecurity.com /files/153644/Slackware-Security-Advisory-bzip2-Updates.html · x_refsource_MISC, x_transferred
  • packetstormsecurity.com /files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html · x_refsource_MISC, x_transferred
  • lists.apache.org /thread.html/rffebcbeaace56ff1fed7916700d2f414ca1366386fb1293e99b3e31e%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r5f80cf3ade5bb73410643e885fe6b7bf9f0222daf3533e42c7ae240c%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r4ad2ea01354e394b7fa8c78a184b7e1634d51be9bc0e9e4d7e6c9305%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6af%40%3Cdev.kafka.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/r5f7ac2bd631ccb12ced65b71ff11f94e76d05b22000795e4a7b61203%40%3Cjira.kafka.apa · mailing-list, x_refsource_MLIST, x_transferred
  • cert-portal.siemens.com /productcert/html/ssa-398330.html

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.