NetSight
IP …
high7.1

CVE-2018-10195

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap…

Impact

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

Affected products

VendorProductAffected versions
Lrzsz ProjectLrzsz
through 0.12.20
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Server
Versions 11, 12
DebianDebian Linux
Version 9.0

Weakness classification

CWE-190

References