Skip to content
COOEY

EXPOSURES › CVE-2019-12900

CVE-2019-12900

CRITICAL
DETAIL
SourceNVD · cve Published2019-06-19 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-12900 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
bzip · vendorcanonical · vendordebian · vendorfreebsd · vendoropensuse · vendorpython · vendorbzip2 · productdebian linux · productfreebsd · productleap · productpython · productubuntu linux · product
DESCRIPTION

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.