CVE:CVE-2019-20053
CNNVD:CNNVD-201912-1189
UPX是一款可移植、可扩展的可执行压缩程序。
UPX 3.95版本中的p_mach.cpp文件的‘canUnpack’函数存在缓冲区错误漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade upx_project upx to a higher version than 3.95,and avoid the version 3.95; Upgrade opensuse backports to a higher version than sle-15:sp1,and avoid the version sle-15:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1