CVE-2021-43315

2023-03-2400:00:00

CWE-119

fedora

www.cve.org

cve-2021-43315

heap-based buffer overflow

upx

packlinuxelf32

elf_lookup

0.001 Low

EPSS

Percentile

31.9%

JSON

A heap-based buffer overflows was discovered in upx, during the generic pointer ‘p’ points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5349

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "upx",
    "versions": [
      {
        "version": "upx before 4.0.0-git-c6b9e3c62d15",
        "status": "affected"
      }
    ]
  }
]

References

github.com/upx/upx/issues/380

0.001 Low

EPSS

Percentile

31.9%

JSON

Related for CVELIST:CVE-2021-43315