Security update for upx SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2023:0088-1 Final 1 1 2023-04-11T07:07:29Z current 2023-04-11T07:07:29Z 2023-04-11T07:07:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for upx upx was updated to fix the following issues: Update to release 4.0.2 * Fix unpack of ELF x86-64 that failed with 'CantUnpackException: corrupt b_info' * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic - CVE-2021-30500: Fixed Null pointer dereference in PackLinuxElf:canUnpack() in p_lx_elf.cpp - CVE-2021-30501: Fixed Assertion abort in function MemBuffer:alloc() - CVE-2021-43311: Fixed Heap-based buffer overflow in PackLinuxElf32:elf_lookup() at p_lx_elf.cpp - CVE-2021-43312: Fixed Heap-based buffer overflow in PackLinuxElf64:invert_pt_dynamic at p_lx_elf.cpp:5239 - CVE-2021-43313: Fixed Heap-based buffer overflow in PackLinuxElf32:invert_pt_dynamic at p_lx_elf.cpp:1688 - CVE-2021-43314: Fixed Heap-based buffer overflows in PackLinuxElf32:elf_lookup() at p_lx_elf.cp - CVE-2021-43315: Fixed Heap-based buffer overflows in PackLinuxElf32:elf_lookup() at p_lx_elf.cp - CVE-2021-43316: Fixed Heap-based buffer overflow in func get_le64() - CVE-2021-43317: Fixed Heap-based buffer overflows in PackLinuxElf64:elf_lookup() at p_lx_elf.cp - CVE-2023-23456: Fixed heap-buffer-overflow in PackTmt:pack() - CVE-2023-23457: Fixed SEGV on PackLinuxElf64:invert_pt_dynamic() in p_lx_elf.cpp The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2023-88 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ E-Mail link for openSUSE-SU-2023:0088-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1183510 SUSE Bug 1183510 https://bugzilla.suse.com/1184701 SUSE Bug 1184701 https://bugzilla.suse.com/1184702 SUSE Bug 1184702 https://bugzilla.suse.com/1207121 SUSE Bug 1207121 https://bugzilla.suse.com/1207122 SUSE Bug 1207122 https://bugzilla.suse.com/1209765 SUSE Bug 1209765 https://bugzilla.suse.com/1209766 SUSE Bug 1209766 https://bugzilla.suse.com/1209767 SUSE Bug 1209767 https://bugzilla.suse.com/1209768 SUSE Bug 1209768 https://bugzilla.suse.com/1209769 SUSE Bug 1209769 https://bugzilla.suse.com/1209770 SUSE Bug 1209770 https://bugzilla.suse.com/1209771 SUSE Bug 1209771 https://www.suse.com/security/cve/CVE-2021-20285/ SUSE CVE CVE-2021-20285 page https://www.suse.com/security/cve/CVE-2021-30500/ SUSE CVE CVE-2021-30500 page https://www.suse.com/security/cve/CVE-2021-30501/ SUSE CVE CVE-2021-30501 page https://www.suse.com/security/cve/CVE-2021-43311/ SUSE CVE CVE-2021-43311 page https://www.suse.com/security/cve/CVE-2021-43312/ SUSE CVE CVE-2021-43312 page https://www.suse.com/security/cve/CVE-2021-43313/ SUSE CVE CVE-2021-43313 page https://www.suse.com/security/cve/CVE-2021-43314/ SUSE CVE CVE-2021-43314 page https://www.suse.com/security/cve/CVE-2021-43315/ SUSE CVE CVE-2021-43315 page https://www.suse.com/security/cve/CVE-2021-43316/ SUSE CVE CVE-2021-43316 page https://www.suse.com/security/cve/CVE-2021-43317/ SUSE CVE CVE-2021-43317 page https://www.suse.com/security/cve/CVE-2023-23456/ SUSE CVE CVE-2023-23456 page https://www.suse.com/security/cve/CVE-2023-23457/ SUSE CVE CVE-2023-23457 page SUSE Package Hub 15 SP4 openSUSE Leap 15.4 upx-4.0.2-bp154.4.6.1 upx-4.0.2-bp154.4.6.1 as a component of SUSE Package Hub 15 SP4 upx-4.0.2-bp154.4.6.1 as a component of openSUSE Leap 15.4 A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability. CVE-2021-20285 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-20285.html CVE-2021-20285 https://bugzilla.suse.com/1183510 SUSE Bug 1183510 Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file. CVE-2021-30500 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-30500.html CVE-2021-30500 https://bugzilla.suse.com/1184702 SUSE Bug 1184702 An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file. CVE-2021-30501 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-30501.html CVE-2021-30501 https://bugzilla.suse.com/1184701 SUSE Bug 1184701 A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5382. CVE-2021-43311 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43311.html CVE-2021-43311 https://bugzilla.suse.com/1209765 SUSE Bug 1209765 A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invert_pt_dynamic at p_lx_elf.cpp:5239. CVE-2021-43312 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43312.html CVE-2021-43312 https://bugzilla.suse.com/1209766 SUSE Bug 1209766 A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invert_pt_dynamic at p_lx_elf.cpp:1688. CVE-2021-43313 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43313.html CVE-2021-43313 https://bugzilla.suse.com/1209767 SUSE Bug 1209767 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5368 CVE-2021-43314 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43314.html CVE-2021-43314 https://bugzilla.suse.com/1209768 SUSE Bug 1209768 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5349 CVE-2021-43315 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43315.html CVE-2021-43315 https://bugzilla.suse.com/1209769 SUSE Bug 1209769 A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64(). CVE-2021-43316 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43316.html CVE-2021-43316 https://bugzilla.suse.com/1209770 SUSE Bug 1209770 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf64::elf_lookup() at p_lx_elf.cpp:5404 CVE-2021-43317 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2021-43317.html CVE-2021-43317 https://bugzilla.suse.com/1209771 SUSE Bug 1209771 A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file. CVE-2023-23456 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2023-23456.html CVE-2023-23456 https://bugzilla.suse.com/1207121 SUSE Bug 1207121 A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service. CVE-2023-23457 SUSE Package Hub 15 SP4:upx-4.0.2-bp154.4.6.1 openSUSE Leap 15.4:upx-4.0.2-bp154.4.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLSYENIWX7YMHJJKVRBH2CPDXM5X3IW6/ https://www.suse.com/security/cve/CVE-2023-23457.html CVE-2023-23457 https://bugzilla.suse.com/1207122 SUSE Bug 1207122