Количество 9
Количество 9
CVE-2026-105841
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.
CVE-2026-105841
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.
CVE-2026-105841
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.
CVE-2026-105841
lrzsz before 0.13.0 contains an OS command injection vulnerability in ...
GHSA-w9c3-4vq7-c452
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.
RLSA-2026:86056
Important: lrzsz security, bug fix, and enhancement update
RLSA-2026:83525
Important: lrzsz security, bug fix, and enhancement update
ELSA-2026-86056
ELSA-2026-86056: lrzsz security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-83525
ELSA-2026-83525: lrzsz security, bug fix, and enhancement update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-105841 lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user. | CVSS3: 7.5 | 1% Низкий | 20 дней назад |
 | CVE-2026-105841 lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user. | CVSS3: 7.5 | 1% Низкий | 20 дней назад |
 | CVE-2026-105841 lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user. | CVSS3: 7.5 | 1% Низкий | 20 дней назад |
| CVE-2026-105841 lrzsz before 0.13.0 contains an OS command injection vulnerability in ... | CVSS3: 7.5 | 1% Низкий | 20 дней назад |
| GHSA-w9c3-4vq7-c452 lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user. | CVSS3: 7.5 | 1% Низкий | 20 дней назад |
 | RLSA-2026:86056 Important: lrzsz security, bug fix, and enhancement update | 5 дней назад | ||
| RLSA-2026:83525 Important: lrzsz security, bug fix, and enhancement update | 10 дней назад | ||
| ELSA-2026-86056 ELSA-2026-86056: lrzsz security, bug fix, and enhancement update (IMPORTANT) | 7 дней назад | ||
| ELSA-2026-83525 ELSA-2026-83525: lrzsz security, bug fix, and enhancement update (IMPORTANT) | 12 дней назад |
Уязвимостей на страницу