In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).Īn issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. The attack vector is: Victim must open a crafted HFS filesystem image. Bug is in tsk/fs/hfs.c file in function hfs_cat_traverse() in lines: 952, 1062. The component is: Overflow in fls tool used on HFS image. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfs_dent.c:237. The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. There is an out of bounds read on iso9660 while parsing System Use Sharing Protocol data in fs/iso9660.c. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table.Īn issue was discovered in The Sleuth Kit (TSK) 4.6.6.

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.Īn issue was discovered in The Sleuth Kit (TSK) 4.6.6. In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.

Free HashTools 4.8