PatchTheCVEbzip3 vulnerabilities and fixes
Recent CVEs affecting bzip3, with upgrade or downgrade steps. 7 tracked.
bzip3 has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2023-04-06. Highest priority: CVE-2023-29421 (score 51/100).
- CVE-2023-29421 HIGH 8.8 UPGRADE An issue was discovered in libbzip3.a in bzip3 before 1.2.3
- CVE-2023-29420 MEDIUM 6.5 UPGRADE An issue was discovered in libbzip3.a in bzip3 before 1.2.3
- CVE-2023-29419 MEDIUM 6.5 UPGRADE An issue was discovered in libbzip3.a in bzip3 before 1.2.3
- CVE-2023-29418 MEDIUM 6.5 UPGRADE An issue was discovered in libbzip3.a in bzip3 before 1.2.3
- CVE-2023-29417 MEDIUM 6.5 DOWNGRADE An issue was discovered in libbzip3.a in bzip3 1.2.2
- CVE-2023-29416 MEDIUM 6.5 UPGRADE An issue was discovered in libbzip3.a in bzip3 before 1.3.0
- CVE-2023-29415 MEDIUM 6.5 UPGRADE MITIGATE An issue was discovered in libbzip3.a in bzip3 before 1.3.0
FAQ
How do I fix bzip3 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bzip3 being exploited right now?
None of the tracked bzip3 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bzip3 CVE should I patch first?
CVE-2023-29421 currently ranks highest (51/100): An issue was discovered in libbzip3.a in bzip3 before 1.2.3.