What’s Vulnerable › Vulnerabilities

CVE-2017-13756

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-835

Description

In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls.

Affected products

• Debian Linux: 9.0
• sleuthkit: 4.4.2

References

• https://github.com/sleuthkit/sleuthkit/issues/914
• https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
• https://github.com/sleuthkit/sleuthkit/issues/914
• https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html

Get alerted when CVE-2017-13756 or the next vulnerability affects your stack