CVE-2009-1884 Integer overflow in n/a
An off-by-one error in the Perl Compress-Raw-Bzip2 module allows attackers to cause a denial of service via a crafted compressed stream.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-1884?
CVE-2009-1884 is a medium-severity vulnerability in n/a, published on 19 Aug 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391.
Weakness: CWE-189
Which versions are affected by CVE-2009-1884?
It affects 1 product.
Products include Bzip Compress-Raw-Bzip2.
How do I fix CVE-2009-1884?
Upgrade to a fixed version.
Is CVE-2009-1884 being exploited?
There is no known exploitation of CVE-2009-1884 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2009-1884, GHSA-4x36-p66f-4f99.