{"id":"CVE-2016-2347","aliases":["DEBIAN-CVE-2016-2347","DSA-3540-1","EUVD-2016-3431","GHSA-9xgv-x5fv-g6vp","SUSE-SU-2016:1091-1","UBUNTU-CVE-2016-2347","openSUSE-SU-2024:10490-1"],"status":"published","title":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0...","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03228,"percentile":0.88337,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2016-04-03T00:00:00Z","modified":"2026-10-20T13:13:31Z","fixes":[{"ecosystem":"Debian:12","package":"lhasa","fixed_in":["0.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lhasa","fixed_in":["0.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lhasa","fixed_in":["0.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"lhasa","fixed_in":["0.0.7-2+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"lhasa","fixed_in":["0.2.0+git3fe46-1+deb8u1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"lhasa","fixed_in":["0.2.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"lhasa","fixed_in":["0.2.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"lhasa","fixed_in":["0.2.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"lhasa","fixed_in":["0.2.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"lhasa","fixed_in":["0.2.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"lhasa","fixed_in":["0.2.0-5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"lhasa","fixed_in":["0.0.7-2+deb7u1ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7-2+deb7u1"}]}],"versions":["0.0.7-2"]},{"source":"osv","ecosystem":"Debian:8","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0+git3fe46-1+deb8u1"}]}],"versions":["0.2.0+git3fe46-1"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-5.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7-2+deb7u1ubuntu0.14.04.1"}]}],"versions":["0.0.7-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"lhasa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.0-2"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"lhasa_project","product":"lhasa"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"https://github.com/fragglet/lhasa/releases/tag/v0.3.1","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0095/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence"]},{"url":"https://github.com/fragglet/lhasa/commit/6fcdb8f1f538b9d63e63a5fa199c5514a15d4564","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-04/msg00039.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3540","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2347"},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0095"},{"url":"https://github.com/advisories/GHSA-9xgv-x5fv-g6vp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2347","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161091-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/973790","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2347","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-2347","tags":["report"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0095/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2347","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-2347","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2017-04-21T20:00:00Z","modified":"2024-08-05T23:24:49.086Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3431","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2017-04-21T20:00:00Z","modified":"2024-08-05T23:24:49Z","updated_at":"2026-11-03T02:22:53.601545Z"}],"ghsa":[{"id":"GHSA-9xgv-x5fv-g6vp","title":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0...","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2022-05-14T02:05:03Z","modified":"2025-04-20T03:37:32Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:01:45.195531Z"}],"nvd":[{"id":"CVE-2016-2347","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2017-04-21T20:59:00.557Z","modified":"2026-06-17T00:43:51.9Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:03:37.619685Z"}],"osv":[{"id":"CVE-2016-2347","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2017-04-21T20:59:00.557Z","modified":"2026-10-20T13:13:31.464143362Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-2347","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2017-04-21T20:59:00.557Z","modified":"2026-09-22T07:01:50.192858979Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-2347","description":"Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.","status":"published","published":"2017-04-21T20:59:00Z","modified":"2026-04-22T10:35:38.16067Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"DSA-3540-1","title":"lhasa - security update","status":"published","published":"2016-04-03T00:00:00Z","modified":"2026-03-09T01:22:39.505661Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"openSUSE-SU-2024:10490-1","title":"lhasa-0.3.1-1.4 on GA media","description":"These are all security issues fixed in the lhasa-0.3.1-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:55.01522Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:1091-1","title":"Security update for lhasa","description":"lhasa was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2016-2347: decode_level3_header heap corruption vulnerability (bsc#973790).\n  ","status":"published","published":"2016-04-18T11:33:42Z","modified":"2026-02-04T02:59:34.778298Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}