CVE-2021-20285

Published: August 31, 2023Last modified: August 31, 2023

Description

A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability.

Severity score breakdown

Parameter	Value
Base score	6.6
Attack Vector	LOCAL
Attack complexity	LOW
Privileges required	NONE
User interaction	REQUIRED
Scope	UNCHANGED
Confidentiality	LOW
Integrity impact	LOW
Availability impact	HIGH
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	upx	Not affected (4.0.2-r0)
Alpaquita Linux	Stream	upx	Not affected (4.1.0-r0)

References

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.