PT-2018-3756 · Lrzsz+2 · Lrzsz+2

Publicado

2018-04-18

·

Atualizado

2024-06-15

·

CVE-2018-10195

CVSS v3.1

7.1

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions lrzsz versions prior to 0.12.21~rc
Description The issue is related to an incorrect length check in the zsdata function, which can cause a size t to wrap around, potentially leading to information leakage to the receiving side. This could allow an attacker to access confidential data and cause a denial of service.
Recommendations For versions prior to 0.12.21rc, update to version 0.12.21rc or later to resolve the issue. As a temporary workaround, consider restricting the use of the zsdata function until a patch is available.

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2022-2808
ALT-PU-2022-2882
ALT-PU-2022-3100
AZL-36960
AZL-7285
BDU:2021-04617
CVE-2018-10195
DLA-2900-1
MGASA-2022-0049
OPENSUSE-SU-2024:11363-1
SUSE-SU-2018:1066-1
SUSE-SU-2018:1070-1
SUSE-SU-2018_1066-1
SUSE-SU-2018_1070-1

Produtos afetados

Alt Linux
Suse
Lrzsz