lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.12.20"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11-sp4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12-sp3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11-sp4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12-sp3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10195.json"