CVE-2018-10689LOWCVSS 5.5fixed in blktrace 1.2.0-1 (bookworm)2018
CVE-2018-10689 [MEDIUM] CVE-2018-10689: blktrace - blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android...
blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.
Scope: local
bookworm: resolved (fixed in 1.2.0-1)
bullseye: resolved (fixed in 1.
debian