Vulnerability CVE-2018-10195: Information

Description

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

Severity: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2018-10195
Published: June 2, 2021
Modified: Feb. 21, 2022
Error type identifier: CWE-190

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
lrzszsisyphus0.12.20-alt20.12.20-alt2ALT-PU-2022-2808-1308272Fixed
lrzszsisyphus_e2k0.12.20-alt20.12.20-alt2ALT-PU-2022-6506-1-Fixed
lrzszsisyphus_riscv640.12.20-alt20.12.20-alt2ALT-PU-2022-6512-1-Fixed
lrzszp100.12.20-alt20.12.20-alt2ALT-PU-2022-2882-1308314Fixed
lrzszp10_e2k0.12.20-alt20.12.20-alt2ALT-PU-2022-6740-1-Fixed
lrzszc10f10.12.20-alt20.12.20-alt2ALT-PU-2022-2882-1308314Fixed
lrzszc9f20.12.20-alt20.12.20-alt2ALT-PU-2022-3100-1308315Fixed
lrzszp110.12.20-alt20.12.20-alt2ALT-PU-2022-2808-1308272Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://lists.suse.com/pipermail/sle-security-updates/2018-April/003955.html?_ga=2.81625751.1026327980.1622040648-1950393542.1547130931
  • Mailing List
  • Third Party Advisory
https://lists.suse.com/pipermail/sle-security-updates/2018-April/003956.html?_ga=2.81625751.1026327980.1622040648-1950393542.1547130931
  • Mailing List
  • Third Party Advisory
http://www.ohse.de/uwe/software/lrzsz.html
  • Release Notes
  • Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1572058
  • Issue Tracking
  • Third Party Advisory
[debian-lts-announce] 20220125 [SECURITY] [DLA 2900-1] lrzsz security update
  • Issue Tracking
  • Mailing List
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:lrzsz_project:lrzsz:*:*:*:*:*:*:*:*
      End including
      0.12.20

      Configuration 2

      cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
      cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
      cpe:2.3:o:suse:linux_enterprise_desktop:12:sp3:*:*:*:*:*:*
      cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:-:-:*:*

      Configuration 3

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top