CVE:CVE-2020-24119
CNNVD:CNNVD-202105-869
UPX是一款可移植、可扩展的可执行压缩程序。
upx 4.0.0 存在缓冲区错误漏洞，该漏洞源于p_lx_elf.cpp的检入并不完美，导致堆缓冲区溢出读取。
solution:Upgrade upx_project upx to a higher version than 4.0.0,and avoid the version 4.0.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34