Lucene search
+L

76 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2021-30256

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00817EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•28 views

Linux Distros Unpatched Vulnerability : CVE-2020-27790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file cou...

5.5CVSS6.3AI score0.00329EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/06/19 12:00 a.m.•25 views

PackLinuxElf64 un_DT_INIT Heap Buffer Overflow DoS

The vulnerability of the PackLinuxElf64::unDTINIT function in the src/plxelf.cpp file of the UPX executable file loader is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00304EPSS
SaveExploits1References8Affected Software4
SUSE CVE
SUSE CVE
•added 2025/03/29 3:04 a.m.•19 views

SUSE CVE-2025-2849

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

3.3CVSS4.8AI score0.00304EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/27 1:31 p.m.•9 views

CVE-2025-2849

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

5.5CVSS4.8AI score0.00304EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•6 views

CVE-2025-2849: Heap-based Buffer Overflow

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

5.5CVSS4.8AI score0.00304EPSS
SaveExploits1References1
OSS-Fuzz
OSS-Fuzz
•added 2024/01/31 3:16 p.m.•10 views

upx:list_packed_file_fuzzer: Heap-buffer-overflow in PackLinuxElf64::elf_find_table_size

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5984912385572864 Project: upx Fuzzing Engine: honggfuzz Fuzz Target: listpackedfilefuzzer Job Type: honggfuzzasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000000294...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2024/01/22 8:03 p.m.•18 views

upx:list_packed_file_fuzzer: Heap-buffer-overflow in PackLinuxElf64::elf_lookup

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5326425628409856 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: listpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000004690...

5.9AI score
SaveExploits0
Veracode
Veracode
•added 2024/01/14 3:48 p.m.•39 views

Heap Buffer Overflow

UPX is vulnerable to a heap-based buffer overflow. The vulnerability is due to the variable 'bucket' pointing to an inaccessible address in the function PackLinuxElf64::invertptdynamic at plxelf.cpp, allowing attackers to potentially execute arbitrary code or cause a denial of service by exploiti...

7.5CVSS8.2AI score0.00817EPSS
SaveExploits1References2Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2024/01/04 3:22 p.m.•12 views

upx:test_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf64::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5290502832324608 Project: upx Fuzzing Engine: afl Fuzz Target: testpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffc75eac2f0 Crash State...

5.9AI score
SaveExploits0
osv_cve
osv_cve
•added 2023/03/24 8:15 p.m.•46 views

CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

7.5CVSS7.8AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2023/03/24 8:15 p.m.•37 views

CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

7.5CVSS7.8AI score0.00817EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/24 8:15 p.m.•52 views

CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

7.5CVSS7.6AI score0.00817EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/24 8:15 p.m.•54 views

CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2023/03/24 8:15 p.m.•40 views

CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

7.5CVSS7.2AI score0.00817EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2023/03/24 8:15 p.m.•56 views

CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

7.5CVSS7.3AI score0.00817EPSS
SaveExploits1References2
Prion
Prion
•added 2023/03/24 8:15 p.m.•36 views

Heap overflow

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

5CVSS7.6AI score0.00817EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/03/24 8:15 p.m.•19 views

UBUNTU-CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

7.5CVSS7.3AI score0.00817EPSS
SaveExploits1References3
Prion
Prion
•added 2023/03/24 8:15 p.m.•35 views

Heap overflow

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

5CVSS7.5AI score0.00817EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/03/24 12:00 a.m.•116 views

CVE-2021-43317

CVE-2021-43317 is a heap-based buffer overflow in UPX, triggered in PackLinuxElf64::elf_lookup() when the generic pointer p points to an inaccessible address in get_le32 (p_lx_elf.cpp:5404). The vulnerability affects UPX and is documented across multiple sources (NVD description, OSV entries). Im...

7.5CVSS7.4AI score0.00817EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder