GSD-2021-1001540 blktrace: Fix uaf in blk_trace access after removing by sysfs

blktrace: Fix uaf in blktrace access after removing by sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

UVI-2021-1001540 blktrace: Fix uaf in blk_trace access after removing by sysfs

blktrace: Fix uaf in blktrace access after removing by sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

UVI-2021-1001517 blktrace: Fix uaf in blk_trace access after removing by sysfs

blktrace: Fix uaf in blktrace access after removing by sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.285 by commit...

GSD-2021-1001517 blktrace: Fix uaf in blk_trace access after removing by sysfs

blktrace: Fix uaf in blktrace access after removing by sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.285 by commit...

GSD-2021-1001501 blktrace: Fix uaf in blk_trace access after removing by sysfs

blktrace: Fix uaf in blktrace access after removing by sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.286 by commit...

UVI-2021-1001501 blktrace: Fix uaf in blk_trace access after removing by sysfs

blktrace: Fix uaf in blktrace access after removing by sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.286 by commit...

Huawei EulerOS: Security Advisory for blktrace (EulerOS-SA-2021-2356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : blktrace (EulerOS-SA-2021-2356)

According to the version of the blktrace package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in btt/devmap.c...

blktrace: Buffer overflow

Background blktrace shows detailed information about what is happening on a block device IO queue. Description A crafted file could cause a buffer overflow in the ‘devmapread’ function because the device and devno arrays are too small. Impact A remote attacker could entice a user to open a...

SUSE: Security Advisory (SUSE-SU-2020:2942-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0919-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for blktrace (EulerOS-SA-2021-1768)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : blktrace (EulerOS-SA-2021-1768)

According to the version of the blktrace package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in btt/devmap.c...

The vulnerability of the dev_map_read function in the input/output tracing utility Blktrace allows a attacker to cause a service failure.

The vulnerability of the devmapread function in the Blktrace input/output tracing utility is related to the operation of pushing the output data beyond the allowable buffer size in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE SLES12 Security Update : blktrace (SUSE-SU-2020:2942-1)

blktrace was updated to fix a security issue : CVE-2018-10689: Prevent buffer overflow in the devmapread function because the device and devno arrays were too small bsc1091942 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

EulerOS Virtualization 3.0.2.2 : blktrace (EulerOS-SA-2020-2217)

According to the version of the blktrace package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...

EulerOS Virtualization 3.0.2.2 : cpio (EulerOS-SA-2020-2216)

According to the version of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...

SUSE-SU-2020:2942-1 Security update for blktrace

blktrace was updated to fix a security issue: - CVE-2018-10689: Prevent buffer overflow in the devmapread function because the device and devno arrays were too small bsc1091942...

EulerOS Virtualization for ARM 64 3.0.6.0 : blktrace (EulerOS-SA-2020-1993)

According to the version of the blktrace package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread...

Huawei EulerOS: Security Advisory for blktrace (EulerOS-SA-2020-1993)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...