UBUNTU-CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

Heap overflow

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

CVE-2020-24119

CVE-2020-24119 affects UPX 4.0.0, with a heap buffer overflow read caused by an imperfect check in p_lx_elf.cpp. Public sources confirm the flaw in UPX’s ELF handling, and multiple vendors released updates to fix it (e.g., openSUSE/openSUSE-2021-813, Mageia/MGASA-2021-0241, openSUSE bug 1186238, ...

CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

CVE-2020-24119

A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect...

Denial Of Service (DoS)

upx:edge is vulnerable to denial of service. Due to a flaw in upx canPack in plxelf.cpp in UPX 3.96, it allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF...

UPX Denial of Service Vulnerability (CNVD-2021-24268)

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. A denial of service vulnerability exists in canPack in plxelf.cpp in UPX version 3.96. An attacker can exploit this vulnerability to cause the application to crash via...

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

DEBIAN-CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF...

UBUNTU-CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

Buffer overflow

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

CVE-2021-20285

CVE-2021-20285 affects UPX 3.96, specifically the canPack path in p_lx_elf.cpp. A crafted ELF can cause denial of service (SEGV, buffer overflow) or other impacts, with the highest threat to availability. Remediation is to apply patched UPX packages (as indicated by Mageia/openSUSE advisories ref...

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

Backdoor.Win32.Kwak.12 Authentication Bypass / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c25393545e5ead3a35996ef9a887bd34.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Kwak.12 Vulnerability: Remote Command Execution Description: The backdoor runs an FTP...