Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-13760: The Sleuth Kit may freeze when processing damaged exFAT images

CVE-2017-13760 · published 9 years ago

Summary

The Sleuth Kit version 4.4.2 can get stuck while the fls command reads a corrupted exFAT disk image, preventing further investigation. This issue affects any system using that version of the toolkit, such as Debian Linux installations. Upgrade to a newer release of The Sleuth Kit or avoid analyzing known‑bad exFAT images until a fix is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sleuthkit	the_sleuth_kit	4.4.2 `cpe:2.3:a:sleuthkit:the_sleuth_kit:4.4.2:::::::*`
debian	debian_linux	9.0 `cpe:2.3:o:debian:debian_linux:9.0:::::::*`

Original advisory text

In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a.

References

https://github.com/sleuthkit/sleuthkit/issues/906 Exploit Issue Tracking Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html Mailing List Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published29 Aug 2017

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2017-13760 · NVD

Track software like this

Free during beta