CVE-2026-105840: Improper Limitation of a Pathname to a Restricted Directory

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

Linux Distros Unpatched Vulnerability : CVE-2026-105842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames...

EUVD-2018-20661

Malware in sbrugna...

SUSE CVE-2018-5650

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the unzipmatch function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

SUSE CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

SUSE CVE-2018-5786

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

SUSE CVE-2018-9058

In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

Denial Of Service (DoS)

lrzip is vulnerable to denial of service. The vulnerability exists because there is an infinite loop and application hang in the getfileinfo function in lrzip.c which allows a remote attacker to cause a denial of service via a crafted lrz file...

USN-5171-2 lrzip vulnerabilities

USN-5171-1 fixed vulnerabilities in Long Range ZIP. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz files. A remote attacker could possibly...

USN-5171-1 lrzip vulnerabilities

It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz files. A remote attacker could possibly use this issue to cause a denial of service crash or other unspecified impact...

CVE-2018-9058

In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

DEBIAN-CVE-2018-9058

In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

Design/Logic Flaw

In Long Range Zip aka lrzip 0.631, there is an infinite loop in the runzipfd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

Design/Logic Flaw

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

DEBIAN-CVE-2018-5786

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

CVE-2018-5786

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

Design/Logic Flaw

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

DEBIAN-CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

CVE-2018-5747

In Long Range Zip aka lrzip 0.631, there is a use-after-free in the ucompthread function stream.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...