5.5
Moyenne
CVE-2024-3209 A vulnerability was found in UPX up to 4.2.2
Description
A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function get_ne64 of the file bele.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259055. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| upx 4.2 | 4.2.0 → 4.2.2 | Pas de correctif indiqué |
Références
- VDB-259055 | UPX bele.h get_ne64 heap-based overflow vuldb.com
- VDB-259055 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #304575 | UPX upx commit 06b0de9c77551cd4e856d453e094d8a0b6ef0d6d heap buffer overflow vuldb.com
- drive.google.com drive.google.com
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de upx
Les 22 CVE de upx →
CVE-2025-2849
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0
4.8
Moyenne
CVE-2021-43316
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address…
Non notée
CVE-2021-43317
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in…
Non notée
CVE-2021-43314
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in…
Non notée