In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4765-1 advisory.

    It was discovered that The Sleuth Kit did not properly handle certain entires in FAT file systems. An     attacker could use this vulnerability to mislead an analyst and obscure their activities. This issue only     affected Ubuntu 14.04 ESM. (CVE-2012-5619)

    It was discovered that The Sleuth Kit mishandled certain crafted ISO 9660 images. If an analyst were     tricked into opening a malicious image, an attacker could cause a denial of service (crash).
    (CVE-2017-13755)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory.

  - In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in     iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls. (CVE-2017-13755)

  - In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in     dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls. (CVE-2017-13756)

  - In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in     libtskimg.a. (CVE-2017-13760)

  - In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a     key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with     READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c). (CVE-2018-19497)

  - The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk     image triggers crash in tsk/fs/hfs_dent.c:237. The component is: Overflow in fls tool used on HFS image.
    Bug is in tsk/fs/hfs.c file in function hfs_cat_traverse() in lines: 952, 1062. The attack vector is:
    Victim must open a crafted HFS filesystem image. (CVE-2019-1010065)

  - In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in     the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c. (CVE-2020-10232)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Fix security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183571	Ubuntu 16.04 ESM : The Sleuth Kit vulnerabilities (USN-4765-1)	Nessus	Ubuntu Local Security Checks	medium
162408	Debian DLA-3054-1 : sleuthkit - LTS security update	Nessus	Debian Local Security Checks	critical
120692	Fedora 28 : sleuthkit (2018-a94297f037)	Nessus	Fedora Local Security Checks	high
112098	Fedora 27 : sleuthkit (2018-7270b39f50)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-13755

medium

Tenable Plugins

medium

critical

high

high