CVE-2020-27797: Buffer Overflow
An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/upxto a version that resolves this vulnerability.Fixed in 4.0.0-r0
Event History
Frequently Asked Questions
What is CVE-2020-27797?
CVE-2020-27797 is a vulnerability in UPX 4.0.0 that allows for an invalid memory address reference in the elf_lookup function.
How does CVE-2020-27797 affect UPX?
CVE-2020-27797 affects UPX 4.0.0 by enabling a crafted Mach-O file to trigger an invalid memory address reference in the elf_lookup function.
What is the severity of CVE-2020-27797?
CVE-2020-27797 has a severity rating of medium with a score of 5.5.
How can I fix CVE-2020-27797 in UPX?
To fix CVE-2020-27797, it is recommended to update UPX to version 4.0.1 or later, as this vulnerability is addressed in the release.
Where can I find more information about CVE-2020-27797?
More information about CVE-2020-27797 can be found at the official GitHub repository for UPX, specifically in issue #390.