PT-2023-14727 · Sleuth Kit · Sleuthkit

Dino Barlattani + 1 · Publicado 2023-01-24 · Atualizado 2024-08-03 · CVE-2022-45639

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sleuthkit fls tool version 4.11.1

Description The issue allows attackers to execute arbitrary commands via a crafted value to the m parameter. This is an OS Command injection vulnerability. Note that there is a dispute regarding the impact of this issue, as some parties claim that the backtick command does not execute outside the context of the user account that entered the command line.

Recommendations For sleuthkit fls tool version 4.11.1, consider restricting the use of the m parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using crafted values for the m parameter. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

ALT-PU-2023-1421

CVE-2022-45639

Produtos afetados

Sleuthkit

Referências · 12

• 🔥 https://exploit-db.com/exploits/51225 · Exploit
• 🔥 http://binaryworld.it · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-45639 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45639 · Nota de Segurança
• https://t.me/cibsecurity/56887 · Publicação no Telegram
• https://t.me/cvenotify/43190 · Publicação no Telegram
• https://binaryworld.it/guidepoc.asp#CVE-2022-45639 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2022-45639 · Nota
• https://t.me/cvenotify/88794 · Publicação no Telegram
• http://packetstormsecurity.com/files/171649/Sleuthkit-4.11.1-Command-Injection.html · Nota
• https://osv.dev/vulnerability/CVE-2022-45639 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2023-1421 · Aviso do Fabricante