Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-27790 Details

Description

A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/upx/upx/commit/eb90eab6325d009004ffb155e3e33f22d4d3ca26 CVEPatchThird Party Advisory
https://github.com/upx/upx/issues/331 CVEExploitIssue TrackingPatchThird Party Advisory
https://github.com/upx/upx/commit/eb90eab6325d009004ffb155e3e33f22d4d3ca26 [email protected]PatchThird Party Advisory
https://github.com/upx/upx/issues/331 [email protected]ExploitIssue TrackingPatchThird Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-369Divide By Zero[email protected]
CWE-369Divide By Zero[email protected]

Affected Products

ProductVersions
upx upx
< 3.96

CPE

  • cpe:2.3:a:upx:upx:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-27790
NVD Published Date:
Aug 18, 2022
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-27790 Details - Not Deferred