An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1948696 | Issue Tracking Patch Third Party Advisory |
| https://github.com/upx/upx/commit/28e761cd42211dfe0124b7a29b2f74730f453e46 | Patch Third Party Advisory |
| https://github.com/upx/upx/issues/486 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/upx/upx/pull/487 | Exploit Patch Third Party Advisory |
Configurations
History
25 Oct 2022, 19:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-617 |
08 Jun 2021, 01:59
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 5.5 |
| CPE | cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:a:upx_project:upx:4.0.0:*:*:*:*:*:*:* |
|
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1948696 - Issue Tracking, Patch, Third Party Advisory | |
| References | (MISC) https://github.com/upx/upx/issues/486 - Exploit, Issue Tracking, Third Party Advisory | |
| References | (MISC) https://github.com/upx/upx/commit/28e761cd42211dfe0124b7a29b2f74730f453e46 - Patch, Third Party Advisory | |
| References | (MISC) https://github.com/upx/upx/pull/487 - Exploit, Patch, Third Party Advisory |
27 May 2021, 02:11
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-20 |
27 May 2021, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-05-27 00:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-30501
Mitre link : CVE-2021-30501
CVE.ORG link : CVE-2021-30501
JSON object : View
Products Affected
fedoraproject
- fedora
redhat
- enterprise_linux
upx_project
- upx