Out-of-bounds read in UPX - CVE-2019-20021
Published: December 28, 2019 / Updated: January 29, 2020
Vulnerability identifier: #VU23826
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-20021
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker to gain access to potentially sensitive information.
The vulnerability exists due to a heap-based buffer over-read within the canUnpack() function in p_mach.cpp. An attacker can create a specially crafted Mach-O file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.
Affected software
UPX
upx (Alpine package)
upx
Fedora
SUSE Linux
upx (Alpine package)
upx
Fedora
SUSE Linux
How to mitigate CVE-2019-20021
Install update from vendor's website.
UPX - update to 3.96
upx - addressed in versions 3.95-5.el7, 3.95-5.el8, 3.95-5.fc30, 3.95-5.fc31, 3.96-1.el7, 3.96-1.el8, 3.96-1.fc30, 3.96-2.fc31
upx - addressed in versions 3.95-5.el7, 3.95-5.el8, 3.95-5.fc30, 3.95-5.fc31, 3.96-1.el7, 3.96-1.el8, 3.96-1.fc30, 3.96-2.fc31
External References
Related Security Bulletins
- Multiple vulnerabilities in UPX
- OpenSUSE Linux update for upx
- Out-of-bounds read in upx (Alpine package)
- Fedora EPEL 7 update for upx
- Fedora 31 update for upx
- Fedora 30 update for upx
- Fedora EPEL 8 update for upx
- Fedora 30 update for upx
- Fedora EPEL 8 update for upx
- Fedora EPEL 7 update for upx
- Fedora 31 update for upx