CVE-2023-22895
Summary
| CVE | CVE-2023-22895 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-01-10 01:15:00 UTC |
|---|
| Updated | 2023-11-07 04:07:00 UTC |
|---|
| Description | The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Bzip2 Project |
Bzip2 |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| crates.io/crates/bzip2/versions |
MISC |
crates.io |
|
| [SECURITY] Fedora 37 Update: rust-sequoia-sop-0.26.1-5.fc37 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 37 Update: rust-sequoia-sop-0.26.1-5.fc37 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 38 Update: rust-sequoia-sop-0.26.1-5.fc38 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 38 Update: rust-sequoia-sop-0.26.1-5.fc38 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 36 Update: rust-sequoia-sq-0.26.0-5.fc36 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 36 Update: rust-sequoia-sq-0.26.0-5.fc36 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Patched an infinite loop bug in src/mem.rs, impl Decompress::decompress() by bjrjk · Pull Request #86 · alexcrichton/bzip2-rs · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 182945 Debian Security Update for rust-bzip2 (CVE-2023-22895)
- 283764 Fedora Security Update for rust (FEDORA-2023-c17427d18a)
- 283765 Fedora Security Update for rust (FEDORA-2023-7bd6fbb5fa)
- 284268 Fedora Security Update for rust (FEDORA-2023-c08ee112f6)
- 905207 Common Base Linux Mariner (CBL-Mariner) Security Update for mozjs60 (12966)
- 905484 Common Base Linux Mariner (CBL-Mariner) Security Update for mozjs60 (12966-1)
