LHa versions 1.14d to 1.14i and 1.17 suffer from buffer overflows and directory traversal flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33241/lha.txt
Source: https://packetstormsecurity.com/files/33241/lha.txt.html