Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-27788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file...

5.5CVSS6.3AI score0.00049EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.1 views

SUSE CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

6.6CVSS6.8AI score0.00123EPSS
Exploits1References4
OSV
OSV
added 2022/08/18 8:15 p.m.15 views

CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

5.5CVSS6.5AI score
Exploits0References2
Veracode
Veracode
added 2021/04/29 12:7 p.m.23 views

Denial Of Service (DoS)

upx:edge is vulnerable to denial of service. Due to a flaw in upx canPack in plxelf.cpp in UPX 3.96, it allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF...

6.6CVSS6.2AI score0.00123EPSS
Exploits1References4Affected Software2
NVD
NVD
added 2021/03/26 5:15 p.m.12 views

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

8.3CVSS0.00123EPSS
Exploits1References2
OSV
OSV
added 2021/03/26 5:15 p.m.1 views

DEBIAN-CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

6.6CVSS7.1AI score0.00123EPSS
Exploits1References1
OSV
OSV
added 2021/03/26 5:15 p.m.0 views

UBUNTU-CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

6.6CVSS7.3AI score0.00123EPSS
Exploits1References2
Snyk
Snyk
added 2021/03/26 5:15 p.m.1 views

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF...

8.3CVSS7.3AI score0.00123EPSS
Exploits1References2
Prion
Prion
added 2021/03/26 5:15 p.m.26 views

Buffer overflow

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

8.3CVSS7AI score0.00123EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/03/26 4:35 p.m.76 views

CVE-2021-20285

CVE-2021-20285 affects UPX 3.96, specifically the canPack path in p_lx_elf.cpp. A crafted ELF can cause denial of service (SEGV, buffer overflow) or other impacts, with the highest threat to availability. Remediation is to apply patched UPX packages (as indicated by Mageia/openSUSE advisories ref...

8.3CVSS6.8AI score0.00123EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/03/26 4:35 p.m.25 views

CVE-2021-20285

A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or buffer overflow and application crash or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability...

8.3CVSS7AI score0.00123EPSS
Exploits1
NVD
NVD
added 2017/11/17 9:29 a.m.20 views

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

7.8CVSS8.1AI score0.00258EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/11/17 9:29 a.m.24 views

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

7.8CVSS7.1AI score0.00258EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2017/11/17 9:0 a.m.22 views

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

7.8CVSS8.1AI score0.00258EPSS
Exploits0
Cvelist
Cvelist
added 2017/11/17 9:0 a.m.17 views

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

8.1AI score0.00258EPSS
Exploits0References1
CVE
CVE
added 2017/11/17 9:0 a.m.53 views

CVE-2017-16869

CVE-2017-16869 concerns UPX 3.94 where p_mach.cpp (in the canPack and unpack paths) can be triggered by a crafted Mach-O file to cause a denial of service via an invalid memory access, with the vendor stating there is no security implication. SUSE/Security entries reiterate the affected UPX 3.94 ...

7.8CVSS8.1AI score0.00258EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2017/11/17 12:0 a.m.3 views

PT-2017-14606 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: UPX version 3.94 Description: The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and application crash, or possibly have other unspecified impacts via a crafted Mach-O file. This is related to t...

7.8CVSS7.2AI score0.00473EPSS
Exploits20References65
Rows per page
Query Builder