[ GLSA 202007-42 ] LHa

[GLSA]

Gentoo Linux Security Advisory

Title: LHa: Buffer overflow (GLSA 202007-42)
Severity: normal
Exploitable: remote
Date: 2020-07-27
Bug(s): #572418
ID: 202007-42

Synopsis

LHa has a buffer overflow in its compression utility with
unspecified impact.


Background

LHa is a console-based program for packing and unpacking LHarc archives.

Affected Packages

Package: app-arch/lha
Vulnerable: < 114i_p20201004
Unaffected: >= 114i_p20201004
Architectures: All supported architectures


Description

A buffer overflow in LHa’s compression code was discovered which can
be triggered by a crafted input file.


Impact

A remote attacker could send a specially crafted file possibly resulting
in a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All LHa users should upgrade to the latest version: