Lucene search
K

9 matches found

Veracode
Veracode
added 2022/11/08 12:9 p.m.18 views

Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists because the heap-based buffer over-read in accuagetbe32 function of miniacc.h, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...

7.8CVSS7.2AI score0.00136EPSS
Exploits1References2Affected Software2
Snyk
Snyk
added 2022/08/26 9:1 a.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the accuagetbe32 function in miniacc.h via a crafted Mach-O file. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Issue Credit: giantbranch of NSFOCUS Security Team...

7.8CVSS6.9AI score0.00136EPSS
Exploits1References2
NVD
NVD
added 2022/08/25 8:15 p.m.13 views

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS0.00136EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 8:15 p.m.15 views

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS6.8AI score
Exploits0References1
OSV
OSV
added 2022/08/25 8:15 p.m.1 views

UBUNTU-CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.3AI score0.00136EPSS
Exploits1References4
Prion
Prion
added 2022/08/25 8:15 p.m.17 views

Heap overflow

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

4.4CVSS7.5AI score0.00136EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2022/08/25 7:37 p.m.18 views

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.5AI score0.00136EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2022/08/25 7:37 p.m.32 views

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.5AI score0.00136EPSS
Exploits1
CVE
CVE
added 2022/08/25 7:37 p.m.62 views

CVE-2020-27799

CVE-2020-27799 describes a heap-based buffer over-read in UPX 4.0.0, triggered by a crafted Mach-O file. The vulnerable component is acc_ua_get_be32 in miniacc.h. The CVE’s metrics indicate a high-severity, local, user-interaction-required flaw with a base score of 7.8. The provided connected doc...

7.8CVSS7.4AI score0.00136EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder