9 matches found
CVE-2016-2347
Integer underflow in the decodelevel3header function in lib/lhafileheader.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive...
CVE-2016-2347
Integer underflow in the decodelevel3header function in lib/lhafileheader.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive...
DEBIAN-CVE-2016-2347
Integer underflow in the decodelevel3header function in lib/lhafileheader.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive...
CVE-2016-2347
The CVE affects the Lhasa library (lib/lha_file_header.c: decode_level3_header) and is due to an integer underflow that can lead to remote code execution via a crafted archive. Fixed in Lhasa 0.3.1 (upstream) and addressed in OSV/NVD records; published advisories indicate a heap/underflow vulnera...
CVE-2016-2347
Integer underflow in the decodelevel3header function in lib/lhafileheader.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive...
SUSE SLED12 Security Update : lhasa (SUSE-SU-2016:1091-1)
lhasa was updated to fix one security issue. This security issue was fixed : - CVE-2016-2347: decodelevel3header heap corruption vulnerability bsc973790. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...
SUSE-SU-2016:1091-1 Security update for lhasa
lhasa was updated to fix one security issue. This security issue was fixed: - CVE-2016-2347: decodelevel3header heap corruption vulnerability bsc973790...
openSUSE Security Update : lhasa (openSUSE-2016-454)
This update for lhasa to 0.3.1 fixes the following issues : These security issues were fixed : - CVE-2016-2347: Integer underflow vulnerability in the code for doing LZH level 3 header decodes boo973790 These non-security issues were fixed : - PMarc -pm1- archives that contain truncated compresse...
[SECURITY] [DSA 3540-1] lhasa security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 03, 2016 https://www.debian.org/security/faq -...