Headline
GHSA-96jv-r488-c2rj: bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow
The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2023-22895
bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow
Moderate severity GitHub Reviewed Published Jan 10, 2023 • Updated Jan 10, 2023
Package
cargo bzip2 (Rust)
Affected versions
< 0.4.4
Description
Related news
CVE-2023-22895
The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.