Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-11740 →

DEBIAN-CVE-2018-11740

An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was foun...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tsk_UTF16toUTF8 in tsk/base/tsk_unicode.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 sleuthkit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 sleuthkit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 sleuthkit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org