Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45042
HistoryJan 14, 2024 - 3:48 p.m.

Heap-Based Buffer Overflow

2024-01-1415:48:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
heap-based buffer overflow
vulnerability
upx-ucl:sid
dt_gnu_hash
dt_hash tables
memory out of bounds

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

upx-ucl:sid is vulnerable to Heap-based buffer overflow. The vulnerability due to by more checking of DT_GNU_HASH and DT_HASH tables in upx commit src/p_lx_elf.cpp. It allow an attacker to change the file sizes finally will leads to memory out of bounds.

CPENameOperatorVersion
upx-ucl:sideq3.96-2
upx-ucl:sideq3.96-2

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%