CVE-2020-10232: Buffer Overflow
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat() in fs/yaffs.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/sleuthkitto a version that resolves this vulnerability.Fixed in 4.7.0-r1 - Upgrade
Upgrade
alpine/sleuthkitto a version that resolves this vulnerability.Fixed in 4.8.0-r1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10232?
CVE-2020-10232 is considered a high severity vulnerability due to its buffer overflow nature which can lead to arbitrary code execution.
How do I fix CVE-2020-10232?
To fix CVE-2020-10232, you should update The Sleuth Kit to version 4.8.1 or later.
Which versions of The Sleuth Kit are affected by CVE-2020-10232?
CVE-2020-10232 affects The Sleuth Kit version 4.8.0 and earlier.
What types of systems are vulnerable to CVE-2020-10232?
CVE-2020-10232 affects systems running Debian 8.0, Debian 9.0, and Fedora versions 30 to 32.
What is the nature of the vulnerability in CVE-2020-10232?
CVE-2020-10232 is a stack buffer overflow vulnerability found in the YAFFS file timestamp parsing logic.