CVE-2005-0953: Bzip BZIP2

Low severity, CVSS 3.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.

Affected products

• Bzip BZIP2: version 0.9 only; version 0.9.5_a only; version 0.9.5_b only; version 0.9.5_c only; version 0.9.5_d only; version 0.9_a only; …

Published 2005-05-02. Last modified 2026-06-16.