CVE-2020-27787

2022-08-1818:34:49

CWE-119

redhat

www.cve.org

upx

segmentation fault

p_lx_elf.cpp

denial of service

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.

CNA Affected

[
  {
    "product": "upx",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v3.96."
      }
    ]
  }
]