785 matches found
PT-2023-12432 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in the upx software. The issue occurs when a generic pointer p points to an inaccessible address in the get le32 function. This problem is essentiall...
CVE-2021-43314
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...
PT-2023-12429 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was discovered, triggered when the variable bucket points to an inaccessible address. This issue occurs in the function PackLinuxElf64::invert pt dynamic at p...
PT-2023-12428 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in the upx software. The problem occurs when a generic pointer points to an inaccessible address in the get le32 function. This issue is essentially...
PT-2023-12430 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in upx. The problem occurs when the variable bucket points to an inaccessible address, triggered in the function PackLinuxElf32::invert pt dynamic a...
CVE-2021-43311
CVE-2021-43311 : A heap-based buffer overflow was discovered in UPX, triggered in PackLinuxElf32::elf_lookup() via a pointer in get_le32() (p_lx_elf.cpp:5382). Public coverage across OSV/NVD confirms the issue in UPX, affecting Linux ELF packing paths. The vulnerability description specifies a he...
CVE-2021-43316
CVE-2021-43316 affects UPX, where a heap-based buffer overflow occurs in the get_le64() function when processing a pointer p to an inaccessible address. The vulnerability impacts availability (per CVSS: HIGH) with no confidentiality/integrity impact, and is linked to UPX ELF packing paths. Public...
CVE-2021-43315
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...
CVE-2021-43312
A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...
CVE-2021-43315
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...
CVE-2021-43317
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...
CVE-2021-43311
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5382...
CVE-2021-43314
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...
CVE-2021-43313
A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688...
K6806: ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
MGASA-2023-0052 Updated upx packages fix security vulnerability
Denial of service due to heap-based buffer overflow issue in UPX in PackTmt::pack in ptmt.cpp file. CVE-2023-23456 Denial of service due to segmentation fault in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. CVE-2023-23457...
Updated upx packages fix security vulnerability
Denial of service due to heap-based buffer overflow issue in UPX in PackTmt::pack in ptmt.cpp file. CVE-2023-23456 Denial of service due to segmentation fault in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. CVE-2023-23457...
SUSE CVE-2006-4018
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...
SUSE CVE-2013-2020
Integer underflow in the cliscanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service crash via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read...