CVE

Id
90008  
CVE No.
CVE-2016-3189  
Status
Candidate  
Description
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.  
Phase
Assigned (20160315)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
778380 90008 CVE-2016-3189 MLIST:[oss-security] 20160620 CVE-2016-3189: bzip2 use-after-free on bzip2recover  View
778381 90008 CVE-2016-3189 URL:http://www.openwall.com/lists/oss-security/2016/06/20/1  View
778382 90008 CVE-2016-3189 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1319648  View
778383 90008 CVE-2016-3189 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
778384 90008 CVE-2016-3189 BID:91297  View
778385 90008 CVE-2016-3189 URL:http://www.securityfocus.com/bid/91297  View
778386 90008 CVE-2016-3189 SECTRACK:1036132  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3080 JVNDB-2016-003853 Oracle Fusion Middleware の Oracle WebCenter Sites における WebCenter Sites に関する脆弱性 Oracle Fusion Middleware の Oracle WebCenter Sites には、WebCenter Sites に関する処理に不備があるため、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2016-3502 90008 6 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003853.html  View