CVE-2019-20021

Description

References

• lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html · Broken Link
• upx/upx · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7XU42G6MUQQXHWRP7DCF2JSIBOJ5GOO
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUTVSTXAFTD552NO2K2RIF6MDQEHP3BE

More vulnerabilities in upx

• CVE-2025-2849MEDIUM 5.5A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::un_DT_INIT of t…
• CVE-2024-3209CRITICAL 9.8A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function get_ne64 of the file bele.h. Th…
• CVE-2021-46179MEDIUM 6.5Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx…
• CVE-2021-43317HIGH 7.5A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). Th…
• CVE-2021-43316HIGH 7.5A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().