CVE-2019-1010065: Integer Overflow
The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfsdent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfscattraverse() in lines: 952, 1062. The attack vector is: Victim must open a crafted HFS filesystem image.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1010065?
CVE-2019-1010065 has a medium severity due to the potential for crashes resulting from an integer overflow.
How do I fix CVE-2019-1010065?
To fix CVE-2019-1010065, update The Sleuth Kit to version 4.6.1 or later to address the integer overflow issue.
What software versions are affected by CVE-2019-1010065?
CVE-2019-1010065 affects The Sleuth Kit versions up to and including 4.6.0, as well as specific Fedora and Debian versions.
What kind of attack can exploit CVE-2019-1010065?
The vulnerability can be exploited by opening a crafted disk image, leading to a crash in the application.
Where can I find more information about CVE-2019-1010065?
For more information about CVE-2019-1010065, refer to the official commit history and issue tracker related to The Sleuth Kit.