Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2022-0049 Critical: lrzsz Information Leak Issue

mageia
Calendar Grey February 5, 2022
Dist Mageia Esm H88
MGASA-2022-0050: curl upgrade resolves severe vulnerability stemming from improper validation. Click here for further information.
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around

Summary

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around. (CVE-2018-10195)

References

- https://bugs.mageia.org/show_bug.cgi?id=29970

- https://lists.debian.org/debian-lts-announce/2022/01/msg00027.html

- https://www.cve.org/CVERecord?id=CVE-2018-10195

Topics%20covered

Topics Covered

security advisory security issue information leak critical Mageia lrzsz size check

Resolution

SRPMS

- 8/core/lrzsz-0.12.21-23.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 05 Feb 2022
URL: https://advisories.mageia.org/MGASA-2022-0049.html
Type: security
CVE: CVE-2018-10195

Topics%20covered

Topics Covered

security advisory security issue information leak critical Mageia lrzsz size check

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here