CVE-2023-22895: Integer Overflow
Published Jan 10, 2023
·Updated
The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.
Affected Software
1 affected component
Bzip2 Project Bzip2 Rust<0.4.4
Remediation
Patch Available
Patch Available
Event History
Jan 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-22895?
CVE-2023-22895 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2023-22895?
To fix CVE-2023-22895, update the bzip2 crate to version 0.4.4 or later.
3
What vulnerabilities are associated with CVE-2023-22895?
CVE-2023-22895 specifically allows attackers to exploit an integer overflow in mem.rs.
4
Which versions of bzip2 are affected by CVE-2023-22895?
All bzip2 versions before 0.4.4 are affected by CVE-2023-22895.
5
What programming language is associated with CVE-2023-22895?
CVE-2023-22895 pertains to the Rust programming language.