UbuntuUSN-4765-1The Sleuth Kit vulnerabilities
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
26.1%
Releases
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- sleuthkit - collection of tools for forensics analysis on volume and file sys
Details
It was discovered that The Sleuth Kit did not properly handle certain
entires in FAT file systems. An attacker could use this vulnerability to
mislead an analyst and obscure their activities. This issue only affected
Ubuntu 14.04 ESM. (CVE-2012-5619)
It was discovered that The Sleuth Kit mishandled certain crafted ISO 9660
images. If an analyst were tricked into opening a malicious image, an
attacker could cause a denial of service (crash). (CVE-2017-13755)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 16.04 | noarch | libtsk13 | < 4.2.0-3ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libtsk-dev | < 4.2.0-3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libtsk13 | < 4.2.0-3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libtsk13-dbgsym | < 4.2.0-3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | sleuthkit | < 4.2.0-3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | sleuthkit-dbgsym | < 4.2.0-3 | UNKNOWN |
| Ubuntu | 16.04 | noarch | sleuthkit | < 4.2.0-3ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libtsk3-3 | < 3.2.3-2.2ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libtsk-dev | < 3.2.3-2.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libtsk3-3 | < 3.2.3-2.2 | UNKNOWN |
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
26.1%