CVE-2018-11739: High severity the sleuth kit vulnerability
An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function rawread in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11739?
CVE-2018-11739 is classified as having a medium severity level due to its potential to disclose sensitive information.
How do I fix CVE-2018-11739?
To fix CVE-2018-11739, upgrade The Sleuth Kit to version 4.6.2 or later, which contains the necessary patches.
What versions of The Sleuth Kit are affected by CVE-2018-11739?
CVE-2018-11739 affects The Sleuth Kit versions from 4.0.2 to 4.6.1.
Can CVE-2018-11739 be exploited remotely?
CVE-2018-11739 may allow an attacker to leverage the out-of-bounds read for information disclosure in some configurations.
What are the potential impacts of CVE-2018-11739?
The potential impacts of CVE-2018-11739 include reading sensitive data from memory, which could lead to unauthorized information disclosure.