Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 02:34:37 +0000 CVE-2023-22895 https://cve.radiocsirt.org/vuln/cve-2023-22895 <p>The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.</p> <p>The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.</p> https://cve.radiocsirt.org/vuln/cve-2023-22895 RUSTSEC-2023-0004 — bzip2 Denial of Service (DoS) https://cve.radiocsirt.org/vuln/rustsec-2023-0004 <p><strong>Affected:</strong> crates.io: bzip2</p> <p>Working with specific payloads can cause a Denial of Service (DoS) vector.</p> <p>Both `Decompress` and `Compress` implementations can enter into infinite loops given specific payloads entered that trigger it.</p> <p>The issue is described in great detail in the [bzip2 repository issue](https://github.com/alexcrichton/bzip2-rs/pull/86).</p> <p>Thanks to bjrjk for finding and providing the patch for the issue and the maintainer responsibly responding to release a fix quickly.</p> <p>Users who use the crate with untrusted data should update the `bzip2` to 0.4.4.</p> <p><strong>Affected:</strong> crates.io: bzip2</p> <p>Working with specific payloads can cause a Denial of Service (DoS) vector.</p> <p>Both `Decompress` and `Compress` implementations can enter into infinite loops given specific payloads entered that trigger it.</p> <p>The issue is described in great detail in the [bzip2 repository issue](https://github.com/alexcrichton/bzip2-rs/pull/86).</p> <p>Thanks to bjrjk for finding and providing the patch for the issue and the maintainer responsibly responding to release a fix quickly.</p> <p>Users who use the crate with untrusted data should update the `bzip2` to 0.4.4.</p> https://cve.radiocsirt.org/vuln/rustsec-2023-0004