Medium severity6.5NVD Advisory· Published Apr 6, 2023· Updated Jun 17, 2026

CVE-2023-29415

Description

An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bzip3 Project/Bzip3
cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*
Range: <1.3.0
Debian/linux
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
bzip3/bzip3cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.3.0

Patches

Vulnerability mechanics

References

github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0nvdPatch
github.com/kspalaiologos/bzip3/issues/95nvdExploitIssue TrackingPatchThird Party Advisory
security-tracker.debian.org/tracker/CVE-2023-29415nvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000