Red Hat Lha vulnerabilities

2 CVEs affecting Red Hat Lha, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0235, published 2004-08-18.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0234, published 2004-08-18. High severity, CVSS 10.0. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute…
• CVE-2004-0235, published 2004-08-18. Medium severity, CVSS 6.4. EPSS: 4.1% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute…