Описание
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| sleuthkit | fixed | 4.9.0+dfsg-2 | package |
Примечания
https://github.com/sleuthkit/sleuthkit/issues/1829
https://github.com/sleuthkit/sleuthkit/pull/1837
Fixed by: https://github.com/sleuthkit/sleuthkit/commit/0c7d5e7333aeb61dace51750b56fcaad55a6359b (sleuthkit-4.9.0)
Crash in CLI tool, no security impact
Связанные уязвимости
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.
ALT-PU-2021-1118: package `sleuthkit` update to version 4.10.1-alt1