CVE-2023-23456

Description

References

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• upx/upx commit 510505a · Patch
• upx/upx · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ
• lists.debian.org/debian-lts-announce/2024/12/msg00013.html

More vulnerabilities in upx

• CVE-2025-2849MEDIUM 5.5A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::un_DT_INIT of t…
• CVE-2024-3209CRITICAL 9.8A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function get_ne64 of the file bele.h. Th…
• CVE-2021-46179MEDIUM 6.5Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx…
• CVE-2021-43317HIGH 7.5A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). Th…
• CVE-2021-43316HIGH 7.5A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().