CVE-2021-30501: Input Validation
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/upxto a version that resolves this vulnerability.Fixed in 4.0.0-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30501?
The severity of CVE-2021-30501 is medium with a CVSS score of 5.5.
What is the affected software for CVE-2021-30501?
The affected software for CVE-2021-30501 includes Upx Project Upx version 4.0.0, Redhat Enterprise Linux version 7.0, and Fedoraproject Fedora version 33.
How can an attacker exploit CVE-2021-30501?
An attacker can cause a denial of service (abort) by exploiting the assertion abort in upx MemBuffer::alloc() in mem.cpp.
Is there a fix available for CVE-2021-30501?
Yes, a fix is available. It is recommended to update to a version of UPX that includes the fix.
Where can I find more information about CVE-2021-30501?
You can find more information about CVE-2021-30501 at the following references: [link1], [link2], [link3].