CVE-2020-27802: Divide by Zero
Published Aug 25, 2022
·Updated
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file.
Affected Software
10 affected componentsFixes available
Upx Project Upx=4.0.0
UPX upx=4.0.0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
alpine/upx<4.0.0-r0
4.0.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/upxto a version that resolves this vulnerability.Fixed in 4.0.0-r0
Event History
Aug 25, 2022
CVE Published
via MITRE·07:38 PM
Data Sourced
via MITRE·07:38 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-27802?
CVE-2020-27802 is a vulnerability discovered in the elf_lookup function in UPX 4.0.0 via a crafted Mach-O file.
2
What is the severity of CVE-2020-27802?
CVE-2020-27802 has a severity of medium with a CVSS score of 5.5.
3
How does CVE-2020-27802 affect UPX?
CVE-2020-27802 affects UPX version 4.0.0.
4
What is the CWE classification for CVE-2020-27802?
CVE-2020-27802 has CWE classifications of CWE-369 and CWE-119.
5
Is there a fix available for CVE-2020-27802?
At the moment, there is no official fix available for CVE-2020-27802. It is recommended to follow the provided reference link for updates and patches.