CVE-2019-20051
Fixed in a distro release EPSS <1%
A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service.
Products: upx, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | upx-ucl | 3.96-1 |
| Debian 14 | upx-ucl | 3.96-1 |
| Ubuntu 16.04 LTS | upx-ucl | no fix |
| Ubuntu 18.04 LTS | upx-ucl | no fix |
| Ubuntu 20.04 LTS | upx-ucl | no fix |