UPX Denial of Service Vulnerability in PackLinuxElf64::canPack() Function

CVE-2020-27788 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.