CVE-2016-3189
Python 3.8 and 4 others: Use After Free
CVE-2016-3189 is fixed in 2 products on 1 platform, first by Python 3.10 3.10.3, released March 16, 2022. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.5
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1569
96th percentile
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Python 3.10 | 3.10.3 | Python 3.10 3.10.3 | Mar 16, 2022 |
| Python 3.9 | 3.9.13 | Python 3.9 3.9.13 | May 17, 2022 |
| No fix yet | |||
| Python 3.7 (Windows apps) | No fix yet | no-fix | n/a |
| Python 3.8 (Windows apps) | No fix yet | no-fix | n/a |