CVE-2018-19497

In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to…

published November 29, 2018

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01523 · 74.4th percentile
Published
2018-11-29T23:00Z
EPSS history
Timeline
  • 29 NOV 23:00Z
    In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to…
    cvelistv5