Integer Overflow Vulnerability in Sleuth Kit Affects Various Filesystems
CVE-2019-1010065

6.5MEDIUM

Key Information:

Vendor

The Sleuth Kit

Status
The Sleuth Kit
Vendor
CVE Published:
18 July 2019

What is CVE-2019-1010065?

The Sleuth Kit 4.6.0 and earlier versions are susceptible to an integer overflow vulnerability triggered when opening a specially crafted HFS filesystem image. This flaw resides in the 'fls' tool and originates in the 'hfs_cat_traverse()' function, potentially causing the application to crash. Attackers can exploit this vulnerability by convincing users to open malicious HFS images, leading to disruptive outcomes in filesystem management.

Affected Version(s)

The Sleuth Kit ≤ 4.6.0

References

https://issuetracker.google.com/issues/77809383
x_refsource_MISC
https://github.com/sleuthkit/sleuthkit/commit/114cd3d0aac...
x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.