Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian 11: DLA-3991-1 critical: UPX buffer overflow and memory corruption

debian lts
Calendar Grey December 11, 2024
Dist Debian Esm H88
Ubuntu LTS Notice USN-4321-1 details a stack overflow vulnerability in Zlib, affecting system stability and enabling possible remote exploitation.
A heap-based buffer write overflow issue was discovered in UPX, an efficient live-compressor for executables

Summary

For Debian 11 bullseye, this problem has been fixed in version
3.96-2+deb11u1.

We recommend that you upgrade your upx-ucl packages.

For the detailed security status of upx-ucl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/upx-ucl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: upx-ucl
Version: 3.96-2+deb11u1
CVE ID: CVE-2023-23456
Debian Bug: 1033258

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here