CVE-2018-15160

Name of the Vulnerable Software and Affected Versions libesedb versions through 2018-04-01

Description The issue allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. This is due to a problem in the libesedb catalog definition read function in libesedb catalog definition.c. The vendor has disputed this issue as described in the GitHub issue comments.

Recommendations For versions through 2018-04-01, consider restricting the use of the libesedb catalog definition read function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.