Debian/sleuthkit: medium 5.5
In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls.
Action: Upgrade sleuthkit to 4.4.2-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.4.2-3 | - |
Fixed versions
| 4.4.2-3 |
Sources
- osv: DEBIAN-CVE-2017-13755#Debian:13/sleuthkit
- https://security-tracker.debian.org/tracker/CVE-2017-13755
published · modified · JSON