LHa: Buffer overflow

LHa: Buffer overflow LHa has a buffer overflow in its compression utility with unspecified impact. lha 2020-07-27 2020-07-27 572418 remote 114i_p20201004 114i_p20201004

LHa is a console-based program for packing and unpacking LHarc archives.

A buffer overflow in LHa’s compression code was discovered which can be triggered by a crafted input file.

A remote attacker could send a specially crafted file possibly resulting in a Denial of Service condition.

There is no known workaround at this time.

All LHa users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=app-arch/lha-114i_p20201004"

CVE-2016-1925 sam_c sam_c