CVE-2018-10689 describes a buffer overflow vulnerability in blktrace 1.2.0, specifically within the dev_map_read function in btt/devmap.c, affecting the Linux kernel and Android. This flaw, rated Medium severity (CVSS 5.5), can lead to an invalid free and denial of service (availability impact) when processing a crafted file, requiring user interaction to trigger. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.0CPE matchmatch criteria | cpe:2.3:a:blktrace_project:blktrace:1.2.0:*:*:*:*:android:*:* | ||
1.2.0CPE matchmatch criteria | cpe:2.3:a:blktrace_project:blktrace:1.2.0:*:*:*:*:linux:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2018-10689
Aug 11, 2020blktrace (aka Block IO Tracing) 1.2.0 as used with the Linux kernel and Android has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small as demonstrated by an invalid free when using the btt program with a crafted file.
May 8, 2018blktrace: buffer overflow in the dev_map_read function in btt/devmap.c
May 2, 2018