REDHAT-BUG-1948692: Null Pointer Dereference
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in plxelf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file.
Upstream issue:
https://github.com/upx/upx/issues/48
Upstream patch:
https://github.com/upx/upx/commit/90279abdfcd235172eab99651043051188938dcc
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1948692?
The severity of REDHAT-BUG-1948692 is critical due to the potential for arbitrary code execution and denial of service.
How do I fix REDHAT-BUG-1948692?
To fix REDHAT-BUG-1948692, you should upgrade to a patched version of UPX that addresses this vulnerability.
What systems are affected by REDHAT-BUG-1948692?
UPX versions up to 4.0.0 are affected by REDHAT-BUG-1948692, specifically targeting the PackLinuxElf::canUnpack function.
Can REDHAT-BUG-1948692 be exploited remotely?
Yes, REDHAT-BUG-1948692 can be exploited remotely if a user processes a specially crafted file.
What type of vulnerability is REDHAT-BUG-1948692?
REDHAT-BUG-1948692 is categorized as a null pointer dereference vulnerability.