CVE-2019-14295: Integer Overflow
An Integer overflow in the getElfSections function in pvmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an allocation of excessive memory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14295?
CVE-2019-14295 is an integer overflow vulnerability in UPX 3.95 that allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section.
How does CVE-2019-14295 impact UPX 3.95?
CVE-2019-14295 affects UPX 3.95 by allowing remote attackers to crash the application through a denial of service attack.
How can a remote attacker exploit CVE-2019-14295?
Remote attackers can exploit CVE-2019-14295 by sending a malicious input to a UPX packed executable, causing a skewed offset larger than the size of the PE section, which triggers an allocation of excessive memory and crashes the application.
What is the severity of CVE-2019-14295?
CVE-2019-14295 has a severity rating of medium, with a CVSS score of 5.5.
Is there a fix available for CVE-2019-14295?
At the moment, there is no official fix available for CVE-2019-14295. It is recommended to stay updated with the latest security patches and upgrades.