upx project upx vulnerabilities and exploits

(subscribe to this query)

Reachable Assertion vulnerability in upx prior to 4.0.0 allows malicious users to cause a denial of service via crafted file passed to the the readx function.

Upx Project Upx

A heap-based buffer overflow exists in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5382.

Upx Project Upx

A heap-based buffer overflow exists in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invert_pt_dynamic at p_lx_elf.cpp:5239.

Upx Project Upx

A heap-based buffer overflow exists in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invert_pt_dynamic at p_lx_elf.cpp:1688.

Upx Project Upx

A heap-based buffer overflows exists in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5349

Upx Project Upx

A heap-based buffer overflow exists in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().

Upx Project Upx

A heap-based buffer overflows exists in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf64::elf_lookup() at p_lx_elf.cpp:5404

Upx Project Upx

A heap-based buffer overflows exists in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5368

Upx Project Upx

A heap-based buffer overflow issue exists in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an malicious user to cause a denial of service (abort) via a crafted file.

Upx Project Upx Fedoraproject Fedora 36 Fedoraproject Fedora 37

A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.

Upx Project Upx Fedoraproject Fedora 36 Fedoraproject Fedora 37

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook