OSV-2021-1775

    Dashboard / Vulnerabilities / OSV-2021-1775

    OSV-2021-1775

    Published: 29 Dec 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in hfs_dir_open_meta_cb

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43040 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: hfs_dir_open_meta_cb hfs_cat_traverse hfs_dir_open_meta ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43040

    Affected packages

    Package

    Name: sleuthkit

    Purl: pkg:generic/sleuthkit

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6bac602fc47bd668fb0b8c14ce64c073ecc2de63
    Fixed -890b7ede03ed065237566930c0e95737b6df0bbd

    Affected versions

    sleuthkit-4.11.0
    sleuthkit-4.11.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1775 | CVE-DB