CVE Vulnerabilities

CVE-2020-27790

Divide By Zero

Published: Aug 18, 2022 | Modified: Aug 23, 2022
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Upx Upx_project * 3.96 (excluding)

References