Debian Sleuthkit vulnerabilities

CVE-2020-10232 [CRITICAL] CVE-2020-10232: sleuthkit - In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer ov... In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c. Scope: local bookworm: resolved (fixed in 4.9.0+dfsg-2) bullseye: resolved (fixed in 4.9.0+dfsg-2) forky: resolved (fixed in 4.9.0+dfsg-2) sid: resolved (fixed in 4.9.0+dfsg-2) trixie:

CVE-2020-10233 [CRITICAL] CVE-2020-10233: sleuthkit - In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buff... In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c. Scope: local bookworm: resolved (fixed in 4.9.0+dfsg-2) bullseye: resolved (fixed in 4.9.0+dfsg-2) forky: resolved (fixed in 4.9.0+dfsg-2) sid: resolved (fixed in 4.9.0+dfsg-2) trixie: resolved (fixed in 4.9.0+dfsg-2)

CVE-2019-1010065 [MEDIUM] CVE-2019-1010065: sleuthkit - The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is... The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfs_dent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfs_cat_traverse() in lines: 952, 1062. The attack vector is: Victim must open a crafted HFS filesystem image. S

CVE-2018-19497 [MEDIUM] CVE-2018-19497: sleuthkit - In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not... In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c). Scope: local bookworm: resolved (fixed in 4.6.5-1) bullseye: re

CVE-2017-13755 [MEDIUM] CVE-2017-13755: sleuthkit - In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-... In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls. Scope: local bookworm: resolved (fixed in 4.4.2-3) bullseye: resolved (fixed in 4.4.2-3) forky: resolved (fixed in 4.4.2-3) sid: resolved (fixed in 4.4.2-3) trixie: resolved (fixed in

CVE-2017-13760 [MEDIUM] CVE-2017-13760: sleuthkit - In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_rea... In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a. Scope: local bookworm: resolved (fixed in 4.4.2-3) bullseye: resolved (fixed in 4.4.2-3) forky: resolved (fixed in 4.4.2-3) sid: resolved (fixed in 4.4.2-3) trixie: resolved (fixed in 4.4.2-3)

CVE-2017-13756 [MEDIUM] CVE-2017-13756: sleuthkit - In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite re... In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls. Scope: local bookworm: resolved (fixed in 4.4.2-3) bullseye: resolved (fixed in 4.4.2-3) forky: resolved (fixed in 4.4.2-3) sid: resolved (fixed in 4.4.2-3) trixie: resolved (fixed in 4.4.2-3)

CVE-2007-4197 [MEDIUM] CVE-2007-4197: sleuthkit - icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks... icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service (NULL dereference and application crash) and prevent examination of certain NTFS files via a malformed NTFS image. Scope: local bookworm: resolved (fixed in 2.09-1) bullseye: resolved (fixe

CVE-2007-4198 [MEDIUM] CVE-2007-4198: sleuthkit - The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (T... The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a certain length value, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read. Scope: local bookworm: res

CVE-2007-4196 [MEDIUM] CVE-2007-4196: sleuthkit - icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain m... icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service (long loop) and prevent examination of certain NTFS files via a malformed NTFS image. Scope: local bookworm: resolved (fixed in 2.09-1) bullseye: resolved (f

CVE-2007-4200 [MEDIUM] CVE-2007-4200: sleuthkit - ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a ... ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image. Scope: local bookworm: resolved (fixed in 2.09

CVE-2007-4195 [MEDIUM] CVE-2007-4195: sleuthkit - Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) b... Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image. Scope: local bookworm: resolved (fixed in 2.09-1) bullseye: resolved (fixed in 2.09-1) forky: resolved (fixed

CVE-2007-4199 [MEDIUM] CVE-2007-4199: sleuthkit - Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attac... Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image that triggers (1) dereference of a certain integer value by ntfs_dent.c in fls, or (2) dereference of a certain other integer value by ntfs.c in fsstat. Scope:

CVE-2012-5619 [LOW] CVE-2012-5619: sleuthkit - The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system en... The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame. Scope: local bookworm: resolved (fixed in 4.1.2-1) bullseye: resolved (fixed in 4.1