CVE-2018-11740: High severity the sleuth kit vulnerability
Published Jun 5, 2018
·Updated
An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tskUTF16toUTF8 in tsk/base/tskunicode.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
Affected Software
1 affected component
sleuthkit The Sleuth Kit>=4.0.2<=4.6.1
Remediation
Patch Available
Event History
Jun 5, 2018
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11740?
CVE-2018-11740 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2018-11740?
To fix CVE-2018-11740, upgrade The Sleuth Kit to version 4.6.2 or later.
3
What affected versions are impacted by CVE-2018-11740?
CVE-2018-11740 affects The Sleuth Kit versions from 4.0.2 to 4.6.1.
4
What is the potential impact of exploiting CVE-2018-11740?
Exploiting CVE-2018-11740 may lead to information disclosure due to an out-of-bounds read.
5
Which component is vulnerable in CVE-2018-11740?
The vulnerable component in CVE-2018-11740 is the tsk_UTF16toUTF8 function in libtskbase.a.