CVE-2020-10233 Memory corruption in n/a

Critical 9.1 Published 8 Mar 2020 Updated 4 Aug 2024

A heap-based buffer over-read in The Sleuth Kit allows attackers to cause denial of service or disclose sensitive memory contents via crafted NTFS images.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2020-10233?

CVE-2020-10233 is a critical memory corruption vulnerability in n/a, published on 8 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.

Weakness: CWE-125

Which versions are affected by CVE-2020-10233?

It affects 1 product.

Products include Sleuthkit the Sleuth Kit.

How do I fix CVE-2020-10233?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-10233 being exploited?

There is no known exploitation of CVE-2020-10233 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2020-10233, GHSA-qv49-69cc-w47j, UBUNTU-CVE-2020-10233.