|
|
Log in / Subscribe / Register

lha: buffer overflow

Package(s):lha CVE #(s):CVE-2016-1925
Created:April 22, 2016 Updated:April 29, 2016
Description:

From the Mageia advisory:

The lha command is vulnerable to a buffer overflow while processing level 0 and level 1 headers while extracting an archive.

Alerts:
Mageia MGASA-2016-0142 lha 2016-04-21

to post comments

lha: buffer overflow

Posted Apr 29, 2016 10:24 UTC (Fri) by jond (subscriber, #37669) [Link]

People who need LHA could consider looking at lhasa, too, which is free software: http://fragglet.github.io/lhasa/

It recently had a CVE too which made me wonder whether this one was a similar problem.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds