CVE-2018-11738

Name of the Vulnerable Software and Affected Versions The Sleuth Kit (TSK) versions 4.0.2 through 4.6.1

Description An issue was discovered in the function ntfs make data run in tsk/fs/ntfs.c, which could allow an attacker to disclose information or cause a denial of service attack by manipulating an out-of-bounds read of a memory region.

Recommendations For versions 4.0.2 through 4.6.1, consider restricting access to the ntfs make data run function in tsk/fs/ntfs.c until a patch is available. As a temporary workaround, avoid using the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.