CVE-2023-29415

An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.

References

Affected packages

Git / github.com/kspalaiologos/bzip3

Affected ranges

Type: GIT
Repo: https://github.com/kspalaiologos/bzip3
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

0aa6ed27345fcd5f2b7883976c562fb839452a96

Affected versions

1.*

1.0.0

1.0.1

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.2.0

1.2.1

1.2.2

1.2.3

Other

corpus

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29415.json"