Описание
p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication whatsoever.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.94-4 |
| cosmic | not-affected | 3.94-4 |
| devel | not-affected | 3.94-4 |
| disco | not-affected | 3.94-4 |
| eoan | not-affected | 3.94-4 |
| esm-apps-legacy/xenial | not-affected | disputed |
| esm-apps/bionic | not-affected | 3.94-4 |
| esm-apps/focal | not-affected | 3.94-4 |
| esm-apps/jammy | not-affected | 3.94-4 |
Показывать по
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication whatsoever.
p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of se ...
** DISPUTED ** p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication whatsoever."
ALT-PU-2019-1210: package `upx` update to version 3.95-alt1
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3