7.8
CVSSv3

CVE-2018-11243

Published: 18/05/2018 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote malicious users to cause a denial of service (double free), limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a crafted file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

upx project upx 3.95

Vendor Advisories

Debian Bug report logs - #899190 upx-ucl: CVE-2018-11243 Package: src:upx-ucl; Maintainer for src:upx-ucl is Robert Luberda <robert@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 20 May 2018 14:21:05 UTC Severity: normal Tags: security, upstream Found in version upx-ucl/394-4 Fixed in ...