CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow...
CVE-2020-10232 is a critical vulnerability (CVSS 9.8) in Sleuthkit The Sleuth Kit, published March 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. Fixed in sleuthkit 4.7.0-r1.
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
CVE-2020-10232- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
CVE-2020-10232- Updated
- 2026-11-02
EUVDEUVD-2020-2690 No score
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
EUVD-2020-2690- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv4c-q5cf-97rm
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow...
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
GHSA-jv4c-q5cf-97rm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
ALPINE-CVE-2020-10232- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
CVE-2020-10232- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
DEBIAN-CVE-2020-10232- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-2105
sleuthkit security update
The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can extract data from internal file system structures. Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown.
Security Fix(es):
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.(CVE-2020-10232)
- Record
OESA-2025-2105- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-2106
sleuthkit security update
The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can extract data from internal file system structures. Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown.
Security Fix(es):
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.(CVE-2020-10232)
- Record
OESA-2025-2106- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-2107
sleuthkit security update
The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can extract data from internal file system structures. Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown.
Security Fix(es):
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.(CVE-2020-10232)
- Record
OESA-2025-2107- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c.
- Record
UBUNTU-CVE-2020-10232- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0143 No score
Updated sleuthkit packages fix security vulnerability
Updated sleuthkit packages fix security vulnerability:
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c (CVE-2020-10232).
- Record
MGASA-2020-0143- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sleuthkitAlpine:v3.11 |
before 4.7.0-r1 | 4.7.0-r1 |
sleuthkitAlpine:v3.12 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.13 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.14 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.15 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.16 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.17 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.18 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.19 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.20 |
before 4.8.0-r1 | 4.8.0-r1 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sleuthkitAlpine:v3.21 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.22 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.23 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitAlpine:v3.24 |
before 4.8.0-r1 | 4.8.0-r1 |
sleuthkitDebian:12 |
before 4.9.0+dfsg-2 | 4.9.0+dfsg-2 |
sleuthkitDebian:13 |
before 4.9.0+dfsg-2 | 4.9.0+dfsg-2 |
sleuthkitDebian:14 |
before 4.9.0+dfsg-2 | 4.9.0+dfsg-2 |
sleuthkitDebian:8 |
before 4.1.3-4+deb8u2, plus listed versions 4.1.3-44.1.3-4+deb8u1 |
4.1.3-4+deb8u2 |
sleuthkitDebian:9 |
before 4.4.0-5+deb9u1, plus listed versions 4.4.0-5 |
4.4.0-5+deb9u1 |
sleuthkitMageia:7 |
before 4.6.6-1.1.mga7 | 4.6.6-1.1.mga7 |
sleuthkitopenEuler:22.03-LTS-SP3 |
before 4.6.7-12.oe2203sp3 | 4.6.7-12.oe2203sp3 |
sleuthkitopenEuler:22.03-LTS-SP4 |
before 4.6.7-13.oe2203sp4 | 4.6.7-13.oe2203sp4 |
sleuthkitopenEuler:20.03-LTS-SP4 |
before 4.6.7-11.oe2003sp4 | 4.6.7-11.oe2003sp4 |
sleuthkitUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.2.3-2ubuntu13.2.3-2ubuntu23.2.3-2.13.2.3-2.23.2.3-2.2ubuntu0.1~esm1 |
None known |
sleuthkitUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.1.3-11ubuntu24.1.3-12ubuntu14.2.0-34.2.0-3ubuntu0.1~esm1 |
None known |
sleuthkitUbuntu:18.04:LTS |
All versions, plus listed versions 4.4.2-14.4.2-3 |
None known |
sleuthkitUbuntu:20.04:LTS |
All versions, plus listed versions 4.6.5-14.6.7-14.6.7-1build1 |
None known |
sleuthkitUbuntu:22.04:LTS |
All versions, plus listed versions 4.10.1+dfsg-14.11.0+dfsg-14.11.1+dfsg-1 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected, aliases, references | OSV |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/sleuthkit/sleuthkit/commit/459ae818fc8dae717549810150de4d191ce158f1
lists.debian.org/debian-lts-announce/2020/03/msg00011.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB
Show 16 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-10232
security.alpinelinux.org/vuln/CVE-2020-10232
security-tracker.debian.org/tracker/CVE-2020-10232
advisories.mageia.org/MGASA-2020-0143.html
bugs.mageia.org/show_bug.cgi?id=26336
debian.org/lts/security/2020/dla-2137
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-2105
ubuntu.com/security/CVE-2020-10232
cve.org/CVERecord?id=CVE-2020-10232