CVE-2018-10195: Integer Overflow
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around.
Other sources
Lrzsz has an integer overflow vulernability in the src/zm.c:zsdata() function. An attacker could exploit this with the sz command to cause a crash or potentially leak information to the receiving server.
Additional References:
https://bugzilla.novell.com/showbug.cgi?id=1090051
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10195?
CVE-2018-10195 is a vulnerability in Lrzsz before version 0.12.21~rc that can leak information to the receiving side.
What is the severity of CVE-2018-10195?
The severity of CVE-2018-10195 is high with a CVSS score of 7.1.
How can CVE-2018-10195 be exploited?
CVE-2018-10195 can be exploited by attackers who have control over the receiving end of an lrzsz connection and can trigger the incorrect length check in the zsdata function.
Which software versions are affected by CVE-2018-10195?
Lrzsz version 0.12.20 and earlier are affected by CVE-2018-10195.
How can I fix CVE-2018-10195?
To fix CVE-2018-10195, update to version 0.12.21~rc or later of Lrzsz.