https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T03:21:36.358934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-227465 EUVD-2026-227465 2026-10-22T03:21:36.369982+00:00 EUVD-2026-227465 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22895 fkie_cve-2023-22895 2026-10-22T03:21:36.370032+00:00

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.

 https://cve.radiocsirt.org/vuln/ghsa-96jv-r488-c2rj GHSA-96jv-r488-c2rj — bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow 2026-10-22T03:21:36.370082+00:00

Affected: crates.io: bzip2

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in `mem.rs`. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.

 https://cve.radiocsirt.org/vuln/gsd-2023-22895 gsd-2023-22895 2026-10-22T03:21:36.370124+00:00 gsd-2023-22895 https://cve.radiocsirt.org/vuln/msrc_cve-2023-22895 msrc_CVE-2023-22895 — The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an in… 2026-10-22T03:21:36.370168+00:00 msrc_CVE-2023-22895 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12610-1 openSUSE-SU-2024:12610-1 — rage-encryption-0.9.0+0-4.1 on GA media 2026-10-22T03:21:36.370199+00:00

rage-encryption-0.9.0+0-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rustsec-2023-0004 RUSTSEC-2023-0004 — bzip2 Denial of Service (DoS) 2026-10-22T03:21:36.370230+00:00

Affected: crates.io: bzip2

Working with specific payloads can cause a Denial of Service (DoS) vector.

Both `Decompress` and `Compress` implementations can enter into infinite loops given specific payloads entered that trigger it.

The issue is described in great detail in the [bzip2 repository issue](https://github.com/alexcrichton/bzip2-rs/pull/86).

Thanks to bjrjk for finding and providing the patch for the issue and the maintainer responsibly responding to release a fix quickly.

Users who use the crate with untrusted data should update the `bzip2` to 0.4.4.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-22895 UBUNTU-CVE-2023-22895 2026-10-22T03:21:36.370275+00:00

Affected: Ubuntu:20.04:LTS: rust-bzip2, Ubuntu:22.04:LTS: rust-bzip2, Ubuntu:24.04:LTS: rust-bzip2, Ubuntu:25.10: rust-bzip2, Ubuntu:26.10: rust-bzip2, Ubuntu:26.04:LTS: rust-bzip2

The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.