Medium severity5.3OSV Advisory· Published Jan 12, 2023· Updated Jun 17, 2026
CVE-2023-23457
CVE-2023-23457
Description
A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- osv-coords7 versionspkg:apk/chainguard/upxpkg:apk/chainguard/upx-docpkg:apk/wolfi/upxpkg:apk/wolfi/upx-docpkg:rpm/opensuse/upx&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/upx&distro=openSUSE%20Tumbleweedpkg:rpm/suse/upx&distro=SUSE%20Package%20Hub%2015%20SP4
< 0+ 6 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.0.1-bp154.4.3.1
- (no CPE)range: < 4.0.1-2.1
- (no CPE)range: < 4.0.1-bp154.4.3.1
Patches
Vulnerability mechanics
References
5- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860nvdPatchThird Party Advisory
- github.com/upx/upx/issues/631nvdExploitPatchThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/nvd
News mentions
0No linked articles in our index yet.