CVE-2016-1925

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.99%

Published

Jan 23, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.

Weaknesses (CWE)

CWE-191

Affected Products (1)

lha_for_unix_project · lha_for_unixvulnerable

References (6)

http://www.openwall.com/lists/oss-security/2016/01/18/3

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/18/8

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202007-42

http://www.openwall.com/lists/oss-security/2016/01/18/3

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/18/8

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202007-42

KEV Catalog EPSS Scores Vendors All CVEs