CVE-2018-19497

Description

References

• sleuthkit/sleuthkit commit bc04aa0 · Patch
• sleuthkit/sleuthkit#1374 · Patch
• lists.debian.org/debian-lts-announce/2018/12/msg00008.html · Third Party Advisory
• lists.debian.org/debian-lts-announce/2022/06/msg00015.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZXFYOOMSP7NWRTSO4XXGHXAY3CJNAJ6
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLSVLDQLPGKRHHBPYUXVJJPAID6CYBXD

More vulnerabilities in the sleuth kit

• CVE-2026-40026HIGH 7.1The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser where the parse_susp() function …
• CVE-2026-40025MEDIUM 6.1The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrapped_key_parser…
• CVE-2026-40024HIGH 7.1The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary loc…
• CVE-2022-45639HIGH 7.8OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m …
• CVE-2020-10233CRITICAL 9.1In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.