CVE-2018-10689

Description

blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.191

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2019:2162)Low: security update blktrace-debuginfo-1.0.5-9.el7.x86_64.rpm	Linux
blktrace Security Update (ALAS-2019-1320) blktrace-1.0.5-9.amzn2.x86_64.rpm	Linux
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2018-10689)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234