Lucene search
+L

64 matches found

Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•50 views

CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

7.8AI score0.00817EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2023/03/24 12:00 a.m.•76 views

CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/03/24 12:00 a.m.•81 views

CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•10 views

PT-2023-12429 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was discovered, triggered when the variable bucket points to an inaccessible address. This issue occurs in the function PackLinuxElf64::invert pt dynamic at p...

8.3CVSS6.7AI score0.0123EPSS
SaveExploits15References57
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/24 12:00 a.m.•1 views

CVE-2021-43317: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

7.5CVSS5.9AI score0.00817EPSS
SaveExploits1References3
CVE
CVE
•added 2023/03/24 12:00 a.m.•97 views

CVE-2021-43312

CVE-2021-43312 is a heap-based buffer overflow in UPX affecting the Linux ELF packing path, specifically PackLinuxElf64::invert_pt_dynamic at p_lx_elf.cpp:5239. Multiple connected sources (including OSV entries and openSUSE/SUSE advisories) confirm the vulnerability and the affected component, wi...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits1References1Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 3:21 a.m.•10 views

SUSE CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS6AI score0.00349EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2023/01/24 12:00 a.m.•55 views

openSUSE 15 Security Update : upx (openSUSE-SU-2023:0031-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0031-1 advisory. - A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory...

5.5CVSS6.4AI score0.00349EPSS
SaveExploits1References4
NVD
NVD
•added 2023/01/12 7:15 p.m.•28 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS5.4AI score0.00349EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2023/01/12 7:15 p.m.•10 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS6.7AI score0.00349EPSS
SaveExploits1References8
OSV
OSV
•added 2023/01/12 7:15 p.m.•5 views

DEBIAN-CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS6.2AI score0.00349EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2023/01/12 7:15 p.m.•41 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS6.7AI score0.00349EPSS
SaveExploits1References4
OSV
OSV
•added 2023/01/12 7:15 p.m.•16 views

UBUNTU-CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS6.7AI score0.00349EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/12 12:00 a.m.•1 views

CVE-2023-23457: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS7.2AI score0.00349EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/12 12:00 a.m.•178 views

CVE-2023-23457

CVE-2023-23457 — UPX denial of service A vulnerability exists in UPX where a crafted input file can trigger a segmentation fault in PackLinuxElf64::invert_pt_dynamic() (p_lx_elf.cpp), allowing an attacker to cause invalid memory access and Denial of Service. Public advisories (openSUSE, Fedora) r...

5.5CVSS5AI score0.00349EPSS
SaveExploits1References5Affected Software1
AlpineLinux
AlpineLinux
•added 2023/01/12 12:00 a.m.•137 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS5.1AI score0.00349EPSS
SaveExploits1
OSV
OSV
•added 2023/01/12 12:00 a.m.•57 views

CVE-2023-23457 Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.3CVSS6.7AI score
SaveExploits0References8
Debian CVE
Debian CVE
•added 2023/01/12 12:00 a.m.•57 views

CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

5.5CVSS5.6AI score0.00349EPSS
SaveExploits1
OSV
OSV
•added 2022/08/18 8:15 p.m.•30 views

CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

5.5CVSS6.5AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2022/08/18 8:15 p.m.•24 views

CVE-2020-27788

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service...

5.5CVSS6.8AI score0.00329EPSS
SaveExploits1References4
Rows per page
Query Builder