CVE-2017-15056

High

Published: 06/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The p_lx_elf.cpp file in UPX 3.94 mishandles ELF headers, allowing remote attackers to cause application crashes or potentially have unspecified other impacts via a crafted binary file.

Risk Assessment

The organization may experience application downtime, leading to loss of service availability. Additionally, there is a risk of unspecified impacts that could affect system security.

Recommendation

It is recommended to update to the latest version of UPX to mitigate this vulnerability and to monitor systems for suspicious binary files.

Other vulnerabilities in UPX 3.94

CVE-2017-16869High
The p_mach.cpp file in UPX 3.94 has a vulnerability that allows remote attackers to cause a denial of service through invalid memory access and application crash by using a crafted Mach-O file. The issue is related to the canPack and unpack functions.

Original NVD description (English source)

p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS