CVE-2018-11737 Information disclosure in n/a

High 8.1 Published 5 Jun 2018 Updated 17 Sep 2024

An out-of-bounds read in The Sleuth Kit allows attackers to disclose information or cause denial of service via crafted NTFS images.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2018-11737?

CVE-2018-11737 is a high-severity vulnerability in n/a, published on 5 Jun 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.

Weakness: CWE-125

Which versions are affected by CVE-2018-11737?

It affects 1 product.

Products include Sleuthkit the Sleuth Kit.

How do I fix CVE-2018-11737?

Upgrade to a fixed version.

Is CVE-2018-11737 being exploited?

There is no known exploitation of CVE-2018-11737 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2018-11737, GHSA-5q45-m5m4-6hqf, UBUNTU-CVE-2018-11737.