Lucene search
+L

790 matches found

Cvelist
Cvelist
added 2023/01/12 12:00 a.m.44 views

CVE-2023-23456 Upx: heap-buffer-overflow in packtmt::pack()

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.3CVSS5.9AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2023/01/12 12:00 a.m.328 views

CVE-2023-23456

CVE-2023-23456 concerns UPX, the executable packer. A heap-based buffer overflow in UPX’s PackTmt::pack() (p_tmt.cpp) can be triggered by a crafted file, enabling a denial of service via abort/memory corruption. Public advisories across distros confirm the issue; patches exist in several releases...

5.5CVSS5.2AI score0.00387EPSS
SaveExploits1References6Affected Software1
AlpineLinux
AlpineLinux
added 2023/01/12 12:00 a.m.103 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS5.1AI score0.00349EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2023/01/12 12:00 a.m.115 views

CVE-2023-23456

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits1
OSV
OSV
added 2023/01/12 12:00 a.m.31 views

CVE-2023-23456 Upx: heap-buffer-overflow in packtmt::pack()

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.3CVSS6.9AI score
SaveExploits0References9
CVE
CVE
added 2023/01/12 12:00 a.m.150 views

CVE-2023-23457

CVE-2023-23457 — UPX denial of service A vulnerability exists in UPX where a crafted input file can trigger a segmentation fault in PackLinuxElf64::invert_pt_dynamic() (p_lx_elf.cpp), allowing an attacker to cause invalid memory access and Denial of Service. Public advisories (openSUSE, Fedora) r...

5.5CVSS5AI score0.00349EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/12 12:00 a.m.18 views

CVE-2023-23456 Upx: heap-buffer-overflow in packtmt::pack()

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack in ptmt.cpp file. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.3CVSS6.8AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/01/12 12:00 a.m.15 views

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. UPX suffers from a security vulnerability that stems from the presence of a heap-based buffer overflow problem. An attacker could exploit the vulnerability to cause a denial of service abort via a specially crafted file...

5.5CVSS6.7AI score0.00387EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2023/01/12 12:00 a.m.38 views

CVE-2023-23457 Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.3CVSS5.8AI score0.00349EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2023/01/12 12:00 a.m.52 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS5.6AI score0.00349EPSS
SaveExploits1
OSV
OSV
added 2023/01/12 12:00 a.m.49 views

CVE-2023-23457 Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.3CVSS6.7AI score
SaveExploits0References8
Veracode
Veracode
added 2022/11/08 12:12 p.m.20 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to the invalid memory address references in adjABS function of plxelf.cpp, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...

5.5CVSS5.3AI score0.00285EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
added 2022/11/08 12:10 p.m.20 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to the invalid memory address references in elflookup function of plxelf.cpp, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...

5.5CVSS5.3AI score0.00285EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
added 2022/11/08 12:10 p.m.26 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in invertptdynamic function of plxelf.cpp, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...

7.8CVSS7.2AI score0.00335EPSS
SaveExploits2References2Affected Software2
Veracode
Veracode
added 2022/11/08 12:09 p.m.25 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists because the heap-based buffer over-read in accuagetbe32 function of miniacc.h, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...

7.8CVSS7.2AI score0.00326EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
added 2022/11/07 6:08 p.m.18 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to an floating point exception was discovered in the elflookup function in plxelf.cpp via a crafted Mach-O file...

5.5CVSS5.3AI score0.00285EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
added 2022/11/07 5:58 p.m.24 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in the getle64 function of bele.h, allowing an attacker to crash the application through the maliciously crafted Mach-O file...

7.8CVSS7.2AI score0.00379EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
added 2022/11/07 5:48 p.m.28 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in the getle32 function of bele.h, allowing an attacker to crash the application through the maliciously crafted Mach-O file...

7.8CVSS7.2AI score0.00326EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
added 2022/11/03 4:41 a.m.36 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to an assertion abort in upx MemBuffer::alloc in mem.cpp which allows attackers to cause a denial of service abort via a crafted file...

5.5CVSS5.3AI score0.01041EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
added 2022/11/01 2:13 p.m.21 views

Heap-based Buffer Overflow

upx is vulnerable to heap-based buffer overflow. The vulnerability exists in plxelf.cpp which allows an attacker to cause an application crash...

7.1CVSS6.6AI score0.01076EPSS
SaveExploits1References7Affected Software2
Rows per page
Query Builder