Code injection

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file. Remediation Upgrade upx to version 4.2.1 ...

Null pointer dereference

Null pointer dereference was found in upx PackLinuxElf::canUnpack in plxelf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file...

UPX Null Pointer Dereference Vulnerability

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. A null pointer dereference vulnerability exists in PackLinuxElf::canUnpack in plxelf.cpp in UPX version 4.0.0. The vulnerability can be exploited to execute arbitrary...

UPX Assertion Abort Vulnerability

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. An assertion abort vulnerability exists in MemBuffer::alloc in mem.cpp in UPX version 4.0.0. An attacker can exploit this vulnerability via a specially crafted file to...

Fedora: Security Advisory for upx (FEDORA-2021-737766a313)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for upx (FEDORA-2021-ceb9db8de0)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

CVE-2021-30501

CVE-2021-30501 concerns UPX 4.0.0, where an assertion abort in MemBuffer::alloc() (mem.cpp) can be triggered by a crafted file, potentially causing a denial of service. Connected sources confirm the affected component and root cause. OpenSUSE/SUSE advisories (openSUSE-SU-2023:0088-1) and OSV entr...

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

CVE-2021-30500

Null pointer dereference was found in upx PackLinuxElf::canUnpack in plxelf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file...

CVE-2021-30500

CVE-2021-30500: UPX 4.0.0 contains a null pointer dereference in PackLinuxElf::canUnpack() (p_lx_elf.cpp) that can lead to arbitrary code execution and a denial of service when processing crafted ELF files. Public documents reference UPX 4.0.2 as the fixed release (e.g., openSUSE-SU-2023:0088-1; ...

CVE-2021-30500

Null pointer dereference was found in upx PackLinuxElf::canUnpack in plxelf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file...

UPX Heap Buffer Overflow Vulnerability

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. A heap buffer overflow vulnerability exists in UPX version 4.0.0. The vulnerability stems from an imperfect check in plxelf.cpp. No detailed vulnerability details are...

CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

DEBIAN-CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

Heap overflow

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read. A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Issue...