← Database

CVE-2005-1260

MEDIUM CVSS: 5.0 Published: 2005-05-19 Modified: 2026-06-16

Description

bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").

Affected Platforms

Debian Debian LinuxBzip Bzip2Canonical Ubuntu LinuxApple Mac Os X

Weakness Type

CWE-400

References