VDB
ALINUX2-SA-2019%3A0056
ALINUX2-SA-2019%3A0056
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-10689: blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.
Risk Scores
CVSS 3.0
4.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | blktrace |
Timeline
- Oct 8, 2019 CVE Published
- Oct 8, 2019 CVE Updated