MiracleLinux 7 : blktrace-1.0.5-9.el7 (AXSA:2019-4120:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4120:01 advisory. blktrace: buffer overflow in the devmapread function in btt/devmap.c CVE-2018-10689 Tenable has extracted the preceding description block directly from the...

CVE-2018-10689

blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file...

CVE-2018-10689: Improper Restriction of Operations within the Bounds of a Memory Buffer

blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file...

PT-2018-3582

Name of the Vulnerable Software and Affected Versions blktrace versions 1.2.0 Description The issue is related to a buffer overflow in the dev map read function in btt/devmap.c due to the device and devno arrays being too small. This can be demonstrated by an invalid free when using the btt progr...