tocsin

Debian/upx-ucl: medium 5.5

An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.

Action: Upgrade upx-ucl to 4.2.2-1 or later.

Affected

introducedfixedlast affected
04.2.2-1-

Fixed versions

4.2.2-1

Sources

published · modified · JSON