CVE-2017-15056

2017-10-0607:00:00

mitre

www.cve.org

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack().