CVE-2017-13756

Published: 29/08/2017 Updated: 29/11/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sleuthkit the sleuth kit 4.4.2
debian debian linux 9.0

Debian Bug report logs - #873724 sleuthkit: CVE-2017-13760 Package: src:sleuthkit; Maintainer for src:sleuthkit is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 30 Aug 2017 14:03:01 UTC Severity: important Tags: fixed-upstream, security, ...

Debian Bug report logs - #873725 sleuthkit: CVE-2017-13756 Package: src:sleuthkit; Maintainer for src:sleuthkit is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 30 Aug 2017 14:03:05 UTC Severity: important Tags: fixed-upstream, security, ...

Debian Bug report logs - #873726 sleuthkit: CVE-2017-13755 Package: src:sleuthkit; Maintainer for src:sleuthkit is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 30 Aug 2017 14:03:09 UTC Severity: important Tags: fixed-upstream, security, ...

CWE-835 https://github.com/sleuthkit/sleuthkit/issues/914 https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873724

CVE-2017-13756

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect