SB2010092103 - Slackware Linux update for bzip2
Published: September 21, 2010 Updated: May 6, 2017
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Input validation error (CVE-ID: CVE-2010-0405)
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
2) Input validation error (CVE-ID: CVE-2010-0405)
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
3) Input validation error (CVE-ID: CVE-2010-0405)
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
4) Input validation error (CVE-ID: CVE-2010-0405)
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
5) Input validation error (CVE-ID: CVE-2010-0405)
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
Remediation
Install update from vendor's website.