Most recent entries from all

cnvd-2020-16104

EUVD-2026-39703

fkie_cve-2020-10232

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.

GHSA-jv4c-q5cf-97rm

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.

gsd-2020-10232

OESA-2025-2105 — sleuthkit security update

Affected: openEuler:22.03-LTS-SP3: sleuthkit

The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can extract data from internal file system structures. Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown. Security Fix(es):

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.(CVE-2020-10232)

UBUNTU-CVE-2020-10232

Affected: Ubuntu:Pro:14.04:LTS: sleuthkit, Ubuntu:Pro:16.04:LTS: sleuthkit, Ubuntu:18.04:LTS: sleuthkit, Ubuntu:20.04:LTS: sleuthkit, Ubuntu:22.04:LTS: sleuthkit

In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.