Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-20051

Fixed in a distro release EPSS <1%

A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service.

Published 2019-12-27 · CVE record · OSV

Products: upx, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Debian 13upx-ucl3.96-1
Debian 14upx-ucl3.96-1
Ubuntu 16.04 LTSupx-uclno fix
Ubuntu 18.04 LTSupx-uclno fix
Ubuntu 20.04 LTSupx-uclno fix