CVE:CVE-2021-30500
CNNVD:CNNVD-202105-1690
UPX是一款可移植、可扩展的可执行压缩程序。
upx 4.0.0版本存在安全漏洞，该漏洞允许攻击者可利用该漏洞执行任意代码，并通过精心制作的文件导致拒绝服务。
solution:Upgrade upx_project upx to a higher version than 4.0.0,and avoid the version 4.0.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33