Denial Of Service (DoS)

🗓️ 08 Feb 2023 18:02:25Reported by Veracode Vulnerability DatabaseType

UPX vulnerability in PackTmt::pack() function allowing DoS

Reporter	Title	Published	Views	Family All 56
ATTACKERKB	CVE-2023-23456	12 Jan 202319:15	–	attackerkb
AlpineLinux	CVE-2023-23456	12 Jan 202300:00	–	alpinelinux
Chainguard	CVE-2023-23456 vulnerabilities	21 Mar 202504:12	–	cgr
Circl	CVE-2023-23456	12 Jan 202322:30	–	circl
CNNVD	UPX 缓冲区错误漏洞	12 Jan 202300:00	–	cnnvd
CVE	CVE-2023-23456	12 Jan 202300:00	–	cve
Cvelist	CVE-2023-23456 Upx: heap-buffer-overflow in packtmt::pack()	12 Jan 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3991-1] upx-ucl security update	11 Dec 202417:16	–	debian
Debian CVE	CVE-2023-23456	12 Jan 202300:00	–	debiancve
Tenable Nessus	Debian dla-3991 : upx-ucl - security update	11 Dec 202400:00	–	nessus

Vulners

Node

upx upxMatch4.0.0-r0os

AND

upx upxMatch4.0.1-r0os

AND

upx upxMatch3.96-r2os

AND

upx upxMatch4.0.1-r0os

AND

upx upxMatch4.0.0-r0os

AND

upx upxMatch3.96-r1os

AND

upx upxMatch3.96-r0os

AND

upx-ucl upx-uclMatch3.96-2debian

AND

Source	Link
secdb	www.secdb.alpinelinux.org/v3.17/community.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/upx/upx/commit/510505a85cbe45e51fbd470f1aa8b02157c429d4
github	www.github.com/upx/upx/issues/632
lists	www.lists.debian.org/debian-lts-announce/2024/12/msg00013.html

11 Apr 2025 14:54Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3 - 5.5

EPSS0.0039

SSVC