CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

CVE-2021-43313

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in the function PackLinuxElf32::elflookup in plxelf.cpp:5368 that causes the generic pointer p to point to an inaccessible address in func getle32...

CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

PT-2023-12429 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was discovered, triggered when the variable bucket points to an inaccessible address. This issue occurs in the function PackLinuxElf64::invert pt dynamic at p...

PT-2023-12432 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in the upx software. The issue occurs when a generic pointer p points to an inaccessible address in the get le32 function. This problem is essentiall...

PT-2023-12434 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in the upx software. The issue arises when the generic pointer 'p' points to an inaccessible address in the get le32 function. This problem is...

CVE-2021-43314

CVE-2021-43314 describes a heap-based buffer overflow in UPX, triggered in PackLinuxElf32::elf_lookup() via an inaccessible address addressed by the generic pointer p in get_le32() (p_lx_elf.cpp:5368). The issue is under UPX ELF32 parsing and, per connected advisories, was addressed by updating U...

CVE-2021-43311

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5382...

CVE-2021-43315

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...

CVE-2021-43315

CVE-2021-43315 affects upx; a heap-based buffer overflow occurs in UPX’s PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5349 due to a mis-managed pointer. Public disclosures in OSV/OpenSUSE advisories indicate fixes in UPX release 4.0.2. If unpatched, vulnerable versions of upx may crash or be expl...

CVE-2021-43311

CVE-2021-43311 : A heap-based buffer overflow was discovered in UPX, triggered in PackLinuxElf32::elf_lookup() via a pointer in get_le32() (p_lx_elf.cpp:5382). Public coverage across OSV/NVD confirms the issue in UPX, affecting Linux ELF packing paths. The vulnerability description specifies a he...

CVE-2021-43313

UPX is affected by CVE-2021-43313: a heap-based buffer overflow in PackLinuxElf32::invert_pt_dynamic (p_lx_elf.cpp:1688) when processing ELF inputs. Several connected sources confirm the issue and reference the same function/path. The OSV/OpenSUSE advisory indicates this CVE was addressed in the ...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in the function PackLinuxElf32::elflookup in plxelf.cpp:5382 that causes the generic pointer p to point to an inaccessible address in func getle32...

PT-2023-12430 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in upx. The problem occurs when the variable bucket points to an inaccessible address, triggered in the function PackLinuxElf32::invert pt dynamic a...

PT-2023-12428 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in the upx software. The problem occurs when a generic pointer points to an inaccessible address in the get le32 function. This issue is essentially...

PT-2023-12431 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in upx. The issue occurs when the generic pointer p points to an inaccessible address in the get le32 function. This problem is essentially caused in...

K6806: ClamAV UPX heap overflow Vulnerability - CVE-2006-4018

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

MGASA-2023-0052 Updated upx packages fix security vulnerability

Denial of service due to heap-based buffer overflow issue in UPX in PackTmt::pack in ptmt.cpp file. CVE-2023-23456 Denial of service due to segmentation fault in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. CVE-2023-23457...