CVE-2017-15056

p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack().

• CWE-476

• https://github.com/upx/upx/issues/128Issue Tracking, Patch, Third Party Advisory
• https://github.com/upx/upx/issues/128Issue Tracking, Patch, Third Party Advisory

Published

Oct 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15049The ZoomLauncher binary in the Zoom client for Linux before …8.8
• CVE-2017-15051Multiple stored cross-site scripting (XSS) vulnerabilities i…
• CVE-2017-15052TeamPass before 2.1.27.9 does not properly enforce manager a…
• CVE-2017-15053TeamPass before 2.1.27.9 does not properly enforce manager a…
• CVE-2017-15054An arbitrary file upload vulnerability, present in TeamPass …
• CVE-2017-15055TeamPass before 2.1.27.9 does not properly enforce item acce…
• CVE-2017-1506IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site s…
• CVE-2017-15063There are CSRF vulnerabilities in Subrion CMS 4.1.x through …
• CVE-2017-15064Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15065Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15066Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15067Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…