What’s Vulnerable › Vulnerabilities

CVE-2017-13755

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-125

Description

In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls.

Affected products

• Debian Linux: 9.0
• sleuthkit: 4.4.2

References

• https://github.com/sleuthkit/sleuthkit/issues/913
• https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
• https://github.com/sleuthkit/sleuthkit/issues/913
• https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html

Get alerted when CVE-2017-13755 or the next vulnerability affects your stack