CVE-2019-12900

CVE-2019-12900 describes an out-of-bounds write vulnerability in the BZ2_decompress function of bzip2 versions through 1.0.6, impacting various distributions including Debian, FreeBSD, and OpenSUSE, as well as Python. This critical vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to achieve high confidentiality, integrity, and availability impacts over a network with low attack complexity. Despite its severity and high FAUCET Risk Score, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article referencing it, primarily in the context of Juniper Networks patching unrelated vulnerabilities.