CVE-2021-43313

2023-03-2400:00:00

CWE-119

fedora

www.cve.org

heap-based

buffer overflow

upx

variable

inaccessible address

function

packlinuxelf32

invert_pt_dynamic

0.001 Low

EPSS

Percentile

31.9%

JSON

A heap-based buffer overflow was discovered in upx, during the variable ‘bucket’ points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invert_pt_dynamic at p_lx_elf.cpp:1688.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "upx",
    "versions": [
      {
        "version": "upx before 4.0.0-git-c6b9e3c62d15",
        "status": "affected"
      }
    ]
  }
]

References

github.com/upx/upx/issues/378

0.001 Low

EPSS

Percentile

31.9%

JSON

Related for CVELIST:CVE-2021-43313