A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability.
Weakness
The product divides a value by zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Upx | Upx | * | 3.96 (excluding) |
| Upx-ucl | Ubuntu | bionic | * |
| Upx-ucl | Ubuntu | focal | * |
| Upx-ucl | Ubuntu | trusty | * |
| Upx-ucl | Ubuntu | upstream | * |
| Upx-ucl | Ubuntu | xenial | * |