VULNERABILITY INTELLIGENCE

CVE-2017-2158

CVSS score4.3 MEDIUM

EPSS probability0.63%

CISA KEVNot currently listed

Published2018-01-12

Last modified2026-06-17

Description

Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive.