Approved changes feed: RSS · Atom

cpe:2.3:a:bzip:bzip2:1.0.6:*:*:*:*:*:*:*

part: a version: 1.0.6 update: *

VendorBzip (589c2375-e3ee-5992-97f7-bbba443cb6f0)
ProductBzip2 (a496db5e-17ec-55b0-9a82-b28ab59ac128)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/bzip2 purl2cpe 2026-06-01 10:15:04.200120
pkg:deb/ubuntu/bzip2 purl2cpe 2026-06-01 10:15:04.200121
pkg:gitlab/redhat/bzip2 purl2cpe 2026-06-01 10:15:04.200122
pkg:nuget/bzip2 purl2cpe 2026-06-01 10:15:04.200124
pkg:rpm/centos/bzip2 purl2cpe 2026-06-01 10:15:04.200125
pkg:rpm/fedora/bzip2 purl2cpe 2026-06-01 10:15:04.200126
pkg:rpm/opensuse//bzip2 purl2cpe 2026-06-01 10:15:04.200128
pkg:sourceforge/bzip2 purl2cpe 2026-06-01 10:15:04.200129

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3189 vulnerable 2026-06-08 05:07:44.975636 Details available
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
Published: 2016-06-30T17:00:00.000Z
Updated: 2025-06-09T16:01:46.630Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.