CVE-2016-1925

Summary

Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2016/01/18/8
• http://www.openwall.com/lists/oss-security/2016/01/18/3
• https://security.gentoo.org/glsa/202007-42

References

• http://www.openwall.com/lists/oss-security/2016/01/18/8
• http://www.openwall.com/lists/oss-security/2016/01/18/3
• https://security.gentoo.org/glsa/202007-42

• ←Previous
• Next→