MiracleLinux 7 : blktrace-1.0.5-9.el7 (AXSA:2019-4120:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4120:01 advisory. blktrace: buffer overflow in the devmapread function in btt/devmap.c CVE-2018-10689 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : blktrace (ELSA-2019-2162)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2162 advisory. 1.0.5-9 - Fix buffer overflow in the devmapread function 1580579 Fixes CVE-2018-10689 Tenable has extracted the preceding description block directly from the...

EulerOS Virtualization 3.0.6.0 : blktrace (EulerOS-SA-2020-1734)

According to the version of the blktrace package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in...

EulerOS Virtualization for ARM 64 3.0.2.0 : blktrace (EulerOS-SA-2020-1550)

According to the version of the blktrace package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread...

Buffer Overflow

blktrace aka Block IO Tracing is vulnerable to buffer overflow attacks. This exists in the devmapread function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file. This may leads to a application cras...

CVE-2018-10689

blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file...