Msrc Cbl2 Blktrace 1.2.0-6 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_blktrace_1.2.0-6_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-10689MEDIUMCVSS 5.52018-05-08

CVE-2018-10689 [MEDIUM] CWE-119 blktrace (aka Block IO Tracing) 1.2.0 as used with the Linux kernel and Android has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small as blktrace (aka Block IO Tracing) 1.2.0 as used with the Linux kernel and Android has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small as demonstrated by an invalid free when using the btt program with a c