Read the docs
TI-2019-09657 Aliases CVE-2019-12900GHSA-j686-6fc2-2525

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Priority MEDIUM 60CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 6 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.07977 94th percentileScored 2026-11-07
Fix Partial Red Hat: 5 advisoriesRed Hat: 6 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 34

CPEVersionsRoleVendor
cpe:2.3:a:bzip:bzip2:*:*:*:*:*:*:*:*up to 1.0.6VulnerableBzip
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*15.0VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:*:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*19.04VulnerableCanonical
cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*11.2VulnerableFreeBSD
  • cpe:2.3:a:bzip:bzip2:*:*:*:*:*:*:*:* Versions up to 1.0.6 Vulnerable ·Bzip
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:*:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* Versions 19.04 Vulnerable ·Canonical
  • cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:* Versions 11.2 Vulnerable ·FreeBSD
Show 24 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*11.2 p10VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p11:*:*:*:*:*:*11.2 p11VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p12:*:*:*:*:*:*11.2 p12VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*11.2 p2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*11.2 p3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*11.2 p4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*11.2 p5VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*11.2 p6VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*11.2 p7VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:*11.2 p8VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*11.2 p9VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*11.2 rc3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*11.3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*11.3 p1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*12.0VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*12.0 p1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*12.0 p2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*12.0 p3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*12.0 p4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*12.0 p5VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*12.0 p6VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:*12.0 p7VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:*12.0 p8VulnerableFreeBSD
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*3.7.0 to before 3.7.13; 3.8.0 to before 3.8.13; 3.9.0 to before 3.9.11; 3.10.0 to before 3.10.3Vulnerablepython-pillow
  • cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:* Versions 11.2 p10 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p11:*:*:*:*:*:* Versions 11.2 p11 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p12:*:*:*:*:*:* Versions 11.2 p12 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:* Versions 11.2 p2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:* Versions 11.2 p3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:* Versions 11.2 p4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:* Versions 11.2 p5 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:* Versions 11.2 p6 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:* Versions 11.2 p7 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:* Versions 11.2 p8 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:* Versions 11.2 p9 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:* Versions 11.2 rc3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:* Versions 11.3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:* Versions 11.3 p1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:* Versions 12.0 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:* Versions 12.0 p1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:* Versions 12.0 p2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:* Versions 12.0 p3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:* Versions 12.0 p4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:* Versions 12.0 p5 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:* Versions 12.0 p6 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:* Versions 12.0 p7 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:* Versions 12.0 p8 Vulnerable ·FreeBSD
  • cpe:2.3:a:python:python:*:*:*:*:*:*:*:* Versions 3.7.0 to before 3.7.13; 3.8.0 to before 3.8.13; 3.9.0 to before 3.9.11; 3.10.0 to before 3.10.3 Vulnerable ·python-pillow

Remediation

Red Hat 5 advisories

  • RHSA-2025:1154 Released 2025-02-06 · Red Hat rating Important
    Red Hat Integration Camel K 1.10.9 release and security update.
    • RHINT Camel-K 1.10.9
  • RHSA-2025:0925 Released 2025-02-04 · Red Hat rating Moderate
    bzip2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) bzip2-devel-1.0.8-10.el9_5
    • Red Hat Enterprise Linux BaseOS (v. 9) bzip2-1.0.8-10.el9_5, bzip2-libs-1.0.8-10.el9_5
  • RHSA-2025:0733 Released 2025-01-28 · Red Hat rating Moderate
    bzip2 security and bug fix update
    • Red Hat Enterprise Linux BaseOS (v. 8) bzip2-1.0.6-28.el8_10, bzip2-devel-1.0.6-28.el8_10, bzip2-libs-1.0.6-28.el8_10
Show 2 more Red Hat advisories
  • RHSA-2024:10803 Released 2024-12-04 · Red Hat rating Low
    bzip2 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) bzip2-devel-1.0.8-8.el9_4.1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) bzip2-1.0.8-8.el9_4.1, bzip2-libs-1.0.8-8.el9_4.1
  • RHSA-2024:8922 Released 2024-11-06 · Red Hat rating Low
    bzip2 security update
    • Red Hat Enterprise Linux BaseOS (v. 8) bzip2-1.0.6-27.el8_10, bzip2-devel-1.0.6-27.el8_10, bzip2-libs-1.0.6-27.el8_10

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
RHINT Camel-K 1.10.9Fixed RHSA-2025:1154
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:0925
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2024:10803
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:8922, RHSA-2025:0733
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2025:0925
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2024:10803
Not affected: 1 product
  • Red Hat Enterprise Linux 10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-12900
  2. 2026-10-03 Alias added: GHSA-j686-6fc2-2525

References

Patch 4

Advisory 15

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences