Approved changes feed: RSS · Atom

cpe:2.3:a:bzip:bzip2:1.0.4:*:*:*:*:*:*:*

part: a version: 1.0.4 update: *

VendorBzip (589c2375-e3ee-5992-97f7-bbba443cb6f0)
ProductBzip2 (a496db5e-17ec-55b0-9a82-b28ab59ac128)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/bzip2 purl2cpe 2026-06-01 10:15:04.200098
pkg:deb/ubuntu/bzip2 purl2cpe 2026-06-01 10:15:04.200099
pkg:gitlab/redhat/bzip2 purl2cpe 2026-06-01 10:15:04.200101
pkg:nuget/bzip2 purl2cpe 2026-06-01 10:15:04.200102
pkg:rpm/centos/bzip2 purl2cpe 2026-06-01 10:15:04.200103
pkg:rpm/fedora/bzip2 purl2cpe 2026-06-01 10:15:04.200105
pkg:rpm/opensuse//bzip2 purl2cpe 2026-06-01 10:15:04.200106
pkg:sourceforge/bzip2 purl2cpe 2026-06-01 10:15:04.200107

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0405 vulnerable 2026-06-08 04:52:02.261119 Details available
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
Published: 2010-09-28T17:00:00.000Z
Updated: 2024-08-07T00:45:12.275Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.