CVE:CVE-2005-1260
CNNVD:CNNVD-200505-1122
bzip2是一款开源的压缩/解压缩应用程序。
bzip2 存在资源管理错误漏洞，该漏洞允许远程攻击者通过一个可造成无限循环的特制bzip2文件发起拒绝服务攻击(硬盘损耗)，(又称为"解压炸弹")。
solution:Upgrade bzip bzip2 to a higher version than 1.0.3,and avoid the version (,1.0.3); Upgrade canonical ubuntu_linux to a higher version than 4.10,5.04,and avoid the version 4.10,5.04; Upgrade debian debian_linux to a higher version than 3.0,3.1,and avoid the version 3.0,3.1; Upgrade apple mac_os_x to a higher version than 10.4.11,and avoid the version (,10.4.11)