Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer p pointing to an inaccessible address in the getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368. Remediation Upgrade upx to version 4.2.1 or...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow due to the variable bucket pointing to an inaccessible address. The issue can be triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239. Remediation Upgrade upx to version 4.2.1 or higher. Reference...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer p pointing to an inaccessible address in the getle32 function. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5382. Remediation Upgrade upx to version...

DEBIAN-CVE-2021-43313

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688...

UBUNTU-CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

UBUNTU-CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from function PackLinuxElf64::invertptdynamic in plxelf.cpp:5239 that causes the "bucket" variable to point to an inaccessible address...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in function PackLinuxElf32::elflookup in plxelf.cpp:5404 that causes the generic pointer p to point to an inaccessible address in func getle32...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in the function PackLinuxElf32::elflookup in plxelf.cpp:5368 that causes the generic pointer p to point to an inaccessible address in func getle32...

PT-2023-12432 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in the upx software. The issue occurs when a generic pointer p points to an inaccessible address in the get le32 function. This problem is essentiall...

PT-2023-12431 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in upx. The issue occurs when the generic pointer p points to an inaccessible address in the get le32 function. This problem is essentially caused in...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in the function PackLinuxElf32::elflookup in plxelf.cpp:5382 that causes the generic pointer p to point to an inaccessible address in func getle32...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in function PackLinuxElf32::elflookup in plxelf.cpp:5349 that causes the generic pointer p to point to an inaccessible address in func getle32...

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

The threat actor known as Lucky Mouse has developed a Linux version of a malware toolkit called SysUpdate, expanding on its ability to target devices running the operating system. The oldest version of the updated artifact dates back to July 2022, with the malware incorporating new features...

SUSE CVE-2019-20051

A floating-point exception was discovered in PackLinuxElf::elfhash in plxelf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service...

SUSE CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

SUSE CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

DEBIAN-CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

UBUNTU-CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 3.96, which stems from a floating-point exception issue found in the PackLinuxElf64::invertptdynamic function of the plxelf.cpp file, which can be triggered by an attacker with a crafte...