CVE-2020-24119: Buffer Overflow
Published May 14, 2021
·Updated
A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect.
Affected Software
12 affected componentsFixes available
Upx Project Upx=4.0.0
Fedoraproject Fedora=33
Fedoraproject Fedora=34
UPX upx=4.0.0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/upxto a version that resolves this vulnerability.Fixed in 4.0.0-r0
Event History
May 14, 2021
CVE Published
via MITRE·08:32 PM
Data Sourced
via MITRE·08:32 PM
Description
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-24119?
CVE-2020-24119 is a vulnerability that refers to a heap buffer overflow read discovered in upx 4.0.0.
2
What is the severity of CVE-2020-24119?
The severity of CVE-2020-24119 is high, with a CVSS score of 7.1.
3
Which software versions are affected by CVE-2020-24119?
CVE-2020-24119 affects upx 4.0.0, Fedora 33, and Fedora 34.
4
How can I fix CVE-2020-24119?
To fix CVE-2020-24119, it is recommended to update the affected software to the latest version.
5
Where can I find more information about CVE-2020-24119?
You can find more information about CVE-2020-24119 in the references provided.