Unscored DSA-515 2 CVEs

lha - several vulnerabilities

Published Jun 5, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	lha	1.14i-2woody1

Vulnerabilities 2

Unscored —

CVE-2004-0234 EPSS 10%

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as …

May 5, 2004
Unscored —

CVE-2004-0235

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary file…

May 5, 2004