PatchTheCVElhaz vulnerabilities and fixes
Recent CVEs affecting lhaz, with upgrade or downgrade steps. 2 tracked.
lhaz has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-07-17. Highest priority: CVE-2017-2247 (score 43/100).
- CVE-2017-2247 HIGH 7.8 UPGRADE Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier
- CVE-2017-2246 HIGH 7.8 UPGRADE Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain
FAQ
How do I fix lhaz vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lhaz being exploited right now?
None of the tracked lhaz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lhaz CVE should I patch first?
CVE-2017-2247 currently ranks highest (43/100): Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier.