Skip to content
OpenAdvisories
Unscored USN-9073-1 1 CVE

lhasa vulnerability

Published Nov 12, 2026 · Updated Nov 13, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Lhasa incorrectly handled certain LHA archive
headers, leading to an integer underflow. If a user or automated system
were tricked into opening a specially crafted archive, an attacker could
possibly use this issue to cause Lhasa to crash or execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS lhasa 0.3.0-2ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2016-2347

    Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote att…

    lhasa lhasa Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-2347