home.social
Sign in Create account

#upx — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #upx, aggregated by home.social.

  1. marius @[email protected] ·

    Low energy morning, so instead of fixing bugs I'll just add UPX packing on my docker images' binaries.

    #golang #go #upx

    #upx #go #golang
  2. Patryk Krawaczyński @[email protected] ·

    Upakowane ELFy – czerwona flaga dla pliku binarnego w Linuksie ( nfsec.pl/security/6600 ) #linux #malware #upx #packer #security #twittermigration

    youtube.com/watch?v=1M4ADcMn3dA

    #linux #malware #upx #packer #security #twittermigration
  3. 🛡 [email protected]/:~# :blinking_cursor:​ @[email protected] ·

    Heap Buffer Overflow in UPX Identified

    Date: March 26, 2024
    CVE: To be assigned
    Vulnerability Type: Buffer Errors
    CWE: [[CWE-122]]
    Sources: NIST VULNDB VULNDB Submit

    Issue Summary

    A heap buffer overflow vulnerability was identified in the [[UPX|Ultimate Packer for eXecutables]] (UPX), specifically in the commit 06b0de9c77551cd4e856d453e094d8a0b6ef0d6d. This issue occurs during the handling of certain data structures, leading to potential memory corruption. The vulnerability was discovered through fuzzing techniques using the Google OSS-Fuzz project.

    Technical Key findings

    The vulnerability is caused by improper handling of input data, resulting in a heap buffer overflow. This overflow occurs in the handling of packed files during decompression, where the bounds of allocated heap memory are not properly checked.

    Vulnerable products

    • [[UPX]] version identified by commit 06b0de9c77551cd4e856d453e094d8a0b6ef0d6d.

    Impact assessment

    An attacker could exploit this vulnerability to execute arbitrary code on the target system or cause a denial of service through application crash, potentially compromising the system's integrity and availability.

    Patches or workaround

    No specific patches or workarounds were mentioned at the time of reporting. Users are advised to monitor the official [[UPX]] GitHub repository for updates.

    Tags

    #UPX #BufferOverflow #HeapOverflow #SecurityVulnerability #CVE

    #upx #bufferoverflow #heapoverflow #securityvulnerability #cve
  4. Júlio Gardona @[email protected] ·

    A perda no arranque da aplicação que foi compactada pelo #upx é muito pequena. Ferramenta fantástica. :)

    #upx
  5. ⇐∗∗⇒ Jean-Luc - POI I7FI ✅ @[email protected] ·

    Meine Firma verbietet mir implizit den Einsatz von #UPX, weil sie auf einen neuen Virenscanner umgestellt haben, der darauf anschlägt. 🤦‍♂️

    Kennt jemand eine Alternative?

    #upx