Lucene search

K
osvGoogleOSV:CVE-2019-14295
HistoryJul 27, 2019 - 7:15 p.m.

CVE-2019-14295

2019-07-2719:15:12
Google
osv.dev
2

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an allocation of excessive memory.

Rows per page:
1-10 of 301

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%