CVE-2018-10195: Debian Linux

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

Affected products

• Debian Debian Linux: version 9.0 only
• Lrzsz Project Lrzsz: up to and including 0.12.20
• Suse Linux Enterprise Debuginfo: version 11 only
• Suse Linux Enterprise Desktop: version 12 only
• Suse Linux Enterprise Server: version 11 only; version 12 only

Published 2021-06-02. Last modified 2026-06-17.