This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-11740 →

DEBIAN-CVE-2018-11740

An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was foun...

Original description

The description as published by the source.

An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tsk_UTF16toUTF8 in tsk/base/tsk_unicode.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 sleuthkit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 sleuthkit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 sleuthkit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org