MGASA-2023-0052 - Updated upx packages fix security vulnerability
Publication date: 20 Feb 2023
URL: https://advisories.mageia.org/MGASA-2023-0052.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2023-23456,
CVE-2023-23457
Denial of service due to heap-based buffer overflow issue in UPX in
PackTmt::pack() in p_tmt.cpp file. (CVE-2023-23456)
Denial of service due to segmentation fault in UPX in
PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. (CVE-2023-23457)
References:
- https://bugs.mageia.org/show_bug.cgi?id=31449
- https://lists.opensuse.org/archives/list/[email protected]/thread/OY3PZTUNJBOAOSBB3625O5WLS7HRY73I/
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23456
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23457
SRPMS:
- 8/core/upx-4.0.2-1.mga8
Mageia 2023-0052: upx security update
Denial of service due to heap-based buffer overflow issue in UPX in PackTmt::pack() in p_tmt.cpp file
Summary
Denial of service due to heap-based buffer overflow issue in UPX in
PackTmt::pack() in p_tmt.cpp file. (CVE-2023-23456)
Denial of service due to segmentation fault in UPX in
PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. (CVE-2023-23457)
References
- https://bugs.mageia.org/show_bug.cgi?id=31449
- https://lists.opensuse.org/archives/list/[email protected]/thread/OY3PZTUNJBOAOSBB3625O5WLS7HRY73I/
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23456
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23457
Resolution
MGASA-2023-0052 - Updated upx packages fix security vulnerability
SRPMS
- 8/core/upx-4.0.2-1.mga8
Severity
Publication date: 20 Feb 2023
URL: https://advisories.mageia.org/MGASA-2023-0052.html
Type: security
CVE: CVE-2023-23456,
CVE-2023-23457
News
HOWTOs
Features
Best Linux Backup Solutions to Prevent Data Loss in A Ransomware Attack
ManageEngine Vulnerability Manager Plus: How To Protect Your Enterprise from Security Vulnerabilities
High-Impact DoS, Arbitrary Code Execution, Spoofing Bugs Fixed in Thunderbird 102.9.0
A Guide to Business Cybersecurity: Common Digital Attacks and Precautions
New Linux IceFire Ransomware Variant Discovered: What You Need to Know to Secure Your Systems
About Us
Powered By
