UBUNTU-CVE-2016-2347: High severity ubuntu/lhasa vulnerability

Q: Which systems are exposed to this issue?

Systems using Lhasa versions before 0.3.1 to process LHA archives are exposed. Exploitation requires a crafted archive to be decoded.

Q: What does an attacker need to do to exploit the vulnerability?

An attacker needs to provide a crafted archive that reaches Lhasa's archive decoding functionality. The listed vector indicates local attack access and user interaction are required, while no privileges are required.

Q: Is an unpatched system at risk by default?

Risk depends on whether Lhasa is used to open or decode attacker-controlled LHA archives. The available data does not identify a specific default configuration or automatic processing path.

Q: What can be done while patching is not possible?

Do not decode untrusted LHA archives with affected Lhasa versions. Restrict archive processing to trusted inputs until Lhasa can be updated to version 0.3.1 or later.

Published Apr 21, 2017

Updated

Integer underflow in the decodelevel3header function in lib/lhafileheader.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.

Affected Software

2 affected componentsFixes available

ubuntu/lhasa<0.0.7-2+deb7u1ubuntu0.14.04.1

0.0.7-2+deb7u1ubuntu0.14.04.1

ubuntu/lhasa<0.3.0-2ubuntu0.1~esm1

0.3.0-2ubuntu0.1~esm1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/lhasa to a version that resolves this vulnerability.
Fixed in 0.0.7-2+deb7u1ubuntu0.14.04.1
Upgrade
Upgrade ubuntu/lhasa to a version that resolves this vulnerability.
Fixed in 0.3.0-2ubuntu0.1~esm1

Event History

Apr 21, 2017

CVE Published

via OSV·08:59 PM

Data Sourced

via OSV·08:59 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this issue?

Systems using Lhasa versions before 0.3.1 to process LHA archives are exposed. Exploitation requires a crafted archive to be decoded.

What does an attacker need to do to exploit the vulnerability?

An attacker needs to provide a crafted archive that reaches Lhasa's archive decoding functionality. The listed vector indicates local attack access and user interaction are required, while no privileges are required.

Is an unpatched system at risk by default?

Risk depends on whether Lhasa is used to open or decode attacker-controlled LHA archives. The available data does not identify a specific default configuration or automatic processing path.

What can be done while patching is not possible?

Do not decode untrusted LHA archives with affected Lhasa versions. Restrict archive processing to trusted inputs until Lhasa can be updated to version 0.3.1 or later.

UBUNTU-CVE-2016-2347: High severity ubuntu/lhasa vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to do to exploit the vulnerability?

Is an unpatched system at risk by default?

What can be done while patching is not possible?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to do to exploit the vulnerability?

Is an unpatched system at risk by default?

What can be done while patching is not possible?