Unscored CVE-2020-27787 EUVD-2020-20289GHSA-4rhf-85wr-9pxc

A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invali…

Published Aug 18, 2022 · Updated Aug 4, 2024 · Assigned by redhat

Package: upx-ucl Package: upx-ucl Ecosystem: Debian Ecosystem: Ubuntu

Description

A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.

Affected products

Vendor	Product	Affected	Fixed
—	upx	Fixed in v3.96.	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	upx-ucl	3.96-1	—
Debian 13	upx-ucl	3.96-1	—

Ubuntu