Unrated
A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and appl...
CVE-2021-20285
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-20285 upx-ucl Fixed in: 4.2.2-1
- Ubuntu UBUNTU-CVE-2021-20285 upx-ucl
Original description The description as published by the source.
A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability.
References
- report bugzilla.redhat.com
- report github.com