UpHeron
All vulnerabilities

Servers and applications

CVE-2016-3189

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

Severity
Medium 6.5
Published
30 Jun 2016
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.7.13, 3.8.13, 3.9.11, 3.10.3
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 3.7.0 before 3.7.13
  • From 3.8.0 before 3.8.13
  • From 3.9.0 before 3.9.11
  • From 3.10.0 before 3.10.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-3189
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-3189