CVE-2023-23457

A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.

Affected products

Debian, Upx

Upx

< 2022-11-23

CVSS 3.1

5.5 MEDIUM

EPSS

0.3% (28th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2023-01-12

No exploit for CVE-2023-23457 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.