CVE-2018-11739

HIGH

Sleuthkit The Sleuth Kit < 4.6.1 - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function raw_read in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.

References (1)

Core 1
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://github.com/sleuthkit/sleuthkit/issues/1267

Scores

CVSS v3 8.1
EPSS 0.0029
EPSS Percentile 52.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Details

CWE
CWE-125
Status published
Products (1)
sleuthkit/the_sleuth_kit 4.0.2 - 4.6.1
Published Jun 05, 2018
Tracked Since Feb 18, 2026