Bzip2 Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bzip2 Project records in CISA KEV

No Bzip2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Bzip2 · all components

TI-2023-09038 CVE-2023-22895 · GHSA-96jv-r488-c2rj

HIGH 66

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01247 Published 2023-01-10 Fixed in 0.4.4 CWE-190