VULNERABILITY INTELLIGENCE

CVE-2011-4089

CVSS score4.6 MEDIUM
EPSS probability1.04%
CISA KEVNot currently listed
Published2014-04-16
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

Primary references