CVE-2016-1925
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a...
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
- Record
CVE-2016-1925- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-191
- Updated
- 2026-11-02
CVE List No score
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
- Record
CVE-2016-1925- Updated
- 2026-11-02
EUVDEUVD-2016-3015 No score
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
- Record
EUVD-2016-3015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c9qr-jrpq-4qqr
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a...
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
- Record
GHSA-c9qr-jrpq-4qqr- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-191
- Updated
- 2026-11-02
OSVMGASA-2016-0142 No score
Updated lha packages fix CVE-2016-1925
Updated lha package fixes security vulnerability:
The lha command is vulnerable to a buffer overflow while processing level 0 and level 1 headers while extracting an archive (CVE-2016-1925).
- Record
MGASA-2016-0142- Updated
- 2026-11-02
OSVSUSE-SU-2016:1904-1 No score
Security update for lha
lha was updated to fix one security issue.
This security issue was fixed:
- CVE-2016-1925: Buffer Overflow while parsing level0 and level1 headers (bsc#962528).
- Record
SUSE-SU-2016:1904-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-1925 is a critical vulnerability (CVSS 9.8) in Lha For Unix Project For Unix, published April 21, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.99%, the 87th percentile. Fixed in lha 1.14i-20160202.1.mga5.