CVE-2020-24119

Name of the Vulnerable Software and Affected Versions upx version 4.0.0

Description A heap buffer overflow read was discovered in the upx software, specifically due to an imperfect check in the p lx elf.cpp component. This issue can be exploited by a remote attacker to gain access to confidential data and potentially cause a denial of service.

Recommendations For upx version 4.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the p lx elf.cpp component to minimize the risk of exploitation.