PT-2017-13077 · Tsk+2 · The Sleuth Kit+2
Adambuchbinder
·
Publicado
2017-08-29
·
Atualizado
2022-11-29
·
CVE-2017-13755
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
The Sleuth Kit (TSK) version 4.4.2
Description
The issue is triggered by opening a crafted ISO 9660 image, which causes an out-of-bounds read in the
iso9660 proc dir() function in tsk/fs/iso9660 dent.c in libtskfs.a. This can be demonstrated using the fls tool.Recommendations
For version 4.4.2, consider avoiding the use of crafted ISO 9660 images until a patch is available. As a temporary workaround, restrict access to the
iso9660 proc dir() function in tsk/fs/iso9660 dent.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
The Sleuth Kit
Ubuntu