Uwe Ohse vulnerabilities
We track 2 vulnerabilities in Uwe Ohse products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Uwe Ohse vulnerabilities
- 7.5 High severity
lrzsz: Improper Neutralization of Special Elements used in an OS Command
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz
- 7.5 High severity
lrzsz: Improper Limitation of a Pathname to a Restricted Directory
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath() in src/lrz.c only rejects '