CVE Feed

    Dashboard / CVE / CVE-2020-10233

    CVE-2020-10233

    In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.

    Published:Mar 8, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 8, 2020
    EPSS Score:0.00546
    CVSS Score:9.1

    Affected Products

    Vendor
    Sleuthkit
    Product
    The Sleuth Kit

    Exploits

    https://github.com/sleuthkit/sleuthkit/issues/1829https://github.com/sleuthkit/sleuthkit/issues/1829

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-40026 (CVSS 4.8) — The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser wh…
    CVE-2026-40025 (CVSS 4.8) — The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parse…
    CVE-2026-40024 (CVSS 8.4) — The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker t…
    CVE-2022-45639 (CVSS 7.8) — OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands…
    CVE-2020-10232 (CVSS 9.8) — In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YA…
    CVE-2019-14531 (CVSS 9.8) — An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing…
    CVE-2019-14532 (CVSS 9.8) — An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on…
    CVE-2019-1010065 (CVSS 6.5) — The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image t…
    CVE-2018-19497 (CVSS 6.5) — In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key…
    CVE-2018-11739 (CVSS 8.1) — An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-…

    References

    https://github.com/sleuthkit/sleuthkit/issues/1829
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6HGBSKGL66VUDOTC3OA/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFQKIE5U3LS5U7POPGS7YHLUSW2URWGJ/
    https://github.com/sleuthkit/sleuthkit/issues/1829
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6HGBSKGL66VUDOTC3OA/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFQKIE5U3LS5U7POPGS7YHLUSW2URWGJ/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High