Oval Definition:oval:com.ubuntu.bionic:def:201810689000
Revision Date:2018-05-03Version:1
Title:CVE-2018-10689 on Ubuntu 18.04 LTS (bionic) - medium.
Description:blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-10689
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND The 'blktrace' package in bionic was vulnerable but has been fixed (note: '1.1.0-2+deb9u1build0.18.04.1').
  • BACK