CVE-2019-20051 — Incorrect Calculation in Upx-ucl

CWE-682 — Incorrect Calculation8 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 45.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Debian Upx-uclFedoraproject FedoraUPX
Timeline
PublishedDec 27
Latest updateMay 24

Description

A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶debiandebian/upx-ucl< upx-ucl 3.96-1 (bullseye)
▶NVDupx/upx3.95

Also affects: Fedora 30, 31

🔴Vulnerability Details

2
GHSA
GHSA-4pmq-77vh-vh7v: A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf↗2022-05-24
▶
OSV
CVE-2019-20051: A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf↗2019-12-27
▶

📋Vendor Advisories

1
Debian
CVE-2019-20051: upx-ucl - A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf....↗2019
▶

💬Community

4
Bugzilla
CVE-2019-20051 upx: floating point exception in PackLinuxElf::elf_hash in p_lx_elf.cpp [epel-7]↗2020-01-24
▶
Bugzilla
CVE-2019-20051 upx: floating point exception in PackLinuxElf::elf_hash in p_lx_elf.cpp↗2020-01-24
▶
Bugzilla
CVE-2019-20051 upx: floating point exception in PackLinuxElf::elf_hash in p_lx_elf.cpp [epel-8]↗2020-01-24
▶
Bugzilla
CVE-2019-20051 upx: floating point exception in PackLinuxElf::elf_hash in p_lx_elf.cpp [fedora-all]↗2020-01-24
▶
CVE-2019-20051 — Incorrect Calculation in Upx-ucl | cvebase