CVE-2017-16869

High

Published: 17/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The p_mach.cpp file in UPX 3.94 has a vulnerability that allows remote attackers to cause a denial of service through invalid memory access and application crash by using a crafted Mach-O file. The issue is related to the canPack and unpack functions.

Risk Assessment

The vulnerability may lead to application crashes, impacting service availability. However, the vendor has stated that there are no security implications whatsoever.

Recommendation

It is recommended to monitor the application and update to the latest version to minimize the risk associated with potential attacks.

Other vulnerabilities in UPX 3.94

CVE-2017-15056High
The p_lx_elf.cpp file in UPX 3.94 mishandles ELF headers, allowing remote attackers to cause application crashes or potentially have unspecified other impacts via a crafted binary file.

Original NVD description (English source)

p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication whatsoever.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS