[SECURITY] [DLA 3054-1] sleuthkit security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3054-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist June 20, 2022 https://wiki.debian.org/LTS -...

DLA-3054-1 sleuthkit - security update

Bulletin has no description...

Mageia: Security Advisory (MGASA-2020-0143)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0368)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

sleuthkit:sleuthkit_fls_ext_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5693864252538880 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

sleuthkit:sleuthkit_fls_iso9660_fuzzer: Stack-buffer-overflow in parse_susp

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5740954167017472 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsiso9660fuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

sleuthkit:sleuthkit_mmls_gpt_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6482187290148864 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitmmlsgptfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_dinode_lookup

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6289649593745408 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_cat_traverse

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6261381394071552 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6254140750299136 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

sleuthkit:sleuthkit_fls_fat_fuzzer: Strncpy-param-overlap in tsk_fs_name_copy

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5764896327991296 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsfatfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Strncpy-param-overlap Crash...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_load_extended_attrs

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6246231400251392 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

sleuthkit:sleuthkit_fls_ext_fuzzer: Heap-buffer-overflow in ext2fs_inode_walk

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5200092827746304 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Denial Of Service (DoS)

sleuthkit is vulnerable to a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...

Arbitrary Code Execution

sleuthkit is vulnerable to arbitrary code execution. A stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c allows an attacker to execute arbitrary code on the host OS...

Updated sleuthkit packages fix security vulnerability

Updated sleuthkit packages fix security vulnerabilities: An issue was discovered in The Sleuth Kit TSK 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table CVE-2019-14532. In version 4.8.0 and earlier of The Sleuth Kit TSK, there ...

Fedora: Security Advisory for sleuthkit (FEDORA-2020-1dd340ab85)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for sleuthkit (FEDORA-2020-94c2f78e0c)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for sleuthkit (FEDORA-2020-6e3e0c6386)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...