{"id":"CVE-2019-12900","revision":"d8fb2299e8034378a327bc5938122c61","records":[{"revision":"d8fb2299e8034378a327bc5938122c61","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-12900","aliases":[],"title":"BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.","description":"BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.","state":0,"publishedAt":"2019-06-19T22:07:57+00:00","modifiedAt":"2026-10-14T06:50:00.554+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html","https://usn.ubuntu.com/4038-2/","https://usn.ubuntu.com/4038-1/","https://seclists.org/bugtraq/2019/Jul/22","https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html","https://security.freebsd.org/advisories/FreeBSD-SA-19:18.bzip2.asc","https://seclists.org/bugtraq/2019/Aug/4","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html","https://usn.ubuntu.com/4146-1/","https://usn.ubuntu.com/4146-2/","https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html","https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html","http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html","https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html","http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html","http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html","https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc","https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS","https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E","https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-12900","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-12900","identifiers":["CVE-2019-12900"]},"retained":false,"historicalAffected":[]}],"coverage":[]}