CVE-2018-11243

PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a crafted file.

Affected products

Alt Linux, Suse, Upx

Upx

= 3.95

Fix

Available

CVSS 3.0

7.8 HIGH

EPSS

2.5% (84th percentile)

Weakness

CWE-415

NVD status

Modified

Published

2018-05-18

No exploit for CVE-2018-11243 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.