TencentOS Server 4: upx (TSSA-2025:0591)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0591 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

EUVD-2020-20289

Malware in sbrugna...

EUVD-2019-5523

Malware in sbrugna...

EUVD-2018-3283

Malware in sbrugna...

EUVD-2020-16855

Malware in sbrugna...

EUVD-2020-20300

Malware in sbrugna...

EUVD-2019-10607

Malware in sbrugna...

EUVD-2020-20298

Malware in sbrugna...

EUVD-2020-20292

Malware in sbrugna...

EUVD-2025-8501

Malicious code in bioql PyPI...

EUVD-2021-30253

Malicious code in bioql PyPI...

EUVD-2021-7713

Malicious code in bioql PyPI...

EUVD-2023-27557

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-2849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp...

Linux Distros Unpatched Vulnerability : CVE-2020-27790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file cou...

Linux Distros Unpatched Vulnerability : CVE-2019-14295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Integer overflow in the getElfSections function in pvmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service crash via a skewed offset...

ROS-20250616-06

UPX executable packer vulnerability is related to buffer overflow in PackLinuxElf64::unDTINIT of the src/plxelf.cpp file. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2020-27797

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27787

A Segmentaation fault was found in UPX in invertptdynamic function in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...