CVE-2018-10689

Medium

Description

blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.

SeverityMedium

CVSS5.5

Exploit probability—

ProductBlktrace

PublishedMay 3, 2018

First seenMay 3, 2018

How to fix

Vendor advisories

access.redhat.com/errata/RHSA-2019:2162
security.gentoo.org/glsa/202107-15

Affected products

Product	Affected versions	Fixed in
blktrace_project blktrace	1.2.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.