Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 9: DLA-2900-1 Critical: Lrzsz Information Leak Threat

debian lts
Calendar Grey January 25, 2022
Dist Debian Esm H88
An essential patch addressing the buffer overflow flaw in lrzsz to avert potential data exposure on Debian installations.
An issues has been found in lrzsz, a set of tools for zmodem/xmodem/ymodem file transfer
Topics%20covered

Topics Covered

security advisory information leak critical debian file transfer lrzsz

Summary

An issues has been found in lrzsz, a set of tools for zmodem/xmodem/ymodem
file transfer.
Due to an incorrect length check, which might result in a size_t wrap
around, an information leak to the receiving side could happen.


For Debian 9 stretch, this problem has been fixed in version
0.12.21-8+deb9u1.

We recommend that you upgrade your lrzsz packages.

For the detailed security status of lrzsz please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/lrzsz

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: lrzsz
Version: 0.12.21-8+deb9u1
CVE ID: CVE-2018-10195

Topics%20covered

Topics Covered

security advisory information leak critical debian file transfer lrzsz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here