CVE-2020-10232: Buffer Overflow
Published Mar 8, 2020
·Updated
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat() in fs/yaffs.c.
Affected Software
6 affected components
sleuthkit The Sleuth Kit<=4.8.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Fedoraproject Fedora=32
Remediation
Event History
Mar 8, 2020
CVE Published
via MITRE·11:52 PM
Data Sourced
via MITRE·11:52 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10232?
CVE-2020-10232 is considered a high severity vulnerability due to its buffer overflow nature which can lead to arbitrary code execution.
2
How do I fix CVE-2020-10232?
To fix CVE-2020-10232, you should update The Sleuth Kit to version 4.8.1 or later.
3
Which versions of The Sleuth Kit are affected by CVE-2020-10232?
CVE-2020-10232 affects The Sleuth Kit version 4.8.0 and earlier.
4
What types of systems are vulnerable to CVE-2020-10232?
CVE-2020-10232 affects systems running Debian 8.0, Debian 9.0, and Fedora versions 30 to 32.
5
What is the nature of the vulnerability in CVE-2020-10232?
CVE-2020-10232 is a stack buffer overflow vulnerability found in the YAFFS file timestamp parsing logic.