REDHAT-BUG-1572058: Integer Overflow
Published Apr 26, 2018
·Updated
Lrzsz has an integer overflow vulernability in the src/zm.c:zsdata() function. An attacker could exploit this with the sz command to cause a crash or potentially leak information to the receiving server.
Additional References:
https://bugzilla.novell.com/showbug.cgi?id=1090051
Affected Software
1 affected component
Lrzsz lrzsz
Event History
Apr 26, 2018
Data Sourced
via Red Hat·06:03 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access or capability does an attacker need to exploit this issue?
The attacker needs to be able to use the sz command to trigger the vulnerable zsdata() function.
2
What is the expected impact of successful exploitation?
Exploitation can cause a crash and may potentially leak information to the receiving server.