| Package | Affected versions | Patched versions |
|---|---|---|
| bzip2 | = 1.0= 1.0.1= 1.0.2= 1.0.3≤ 1.0.4 |
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free