Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
1/ Akira ransomware targets unpatched VPN servers, exploiting vulnerabilities like CVE-2023-23456. Ensure your systems are patched. #ThreatIntel #InfoSec
Post summary
Akira ransomware is actively exploiting CVE-2023-23456 on unpatched VPN servers, and the post urges users to patch their systems.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | fedoraproject | fedora | 36 | - | - |
| OS | fedoraproject | fedora | 37 | - | - |
| App | upx | upx | - | - | - |