CVE:CVE-2018-10195
CNNVD:CNNVD-202106-167
lrzsz是是Linux/Unix同Windows进行ZModem文件传输的命令行工具。
LRZSZ 0.12.21版本存在安全漏洞，该漏洞源于数zsdata中的长度检查不正确，导致大小t环绕。
solution:Upgrade lrzsz_project lrzsz to a higher version than 0.12.20,and avoid the version (,0.12.20]; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp3,and avoid the version 12:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp4,12:sp3,and avoid the version 11:sp4,12:sp3; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0