Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-10689: blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file. 99999: CVE-2018-10689 blktrace: buffer overflow in the dev_map_read function in btt/devmap.c
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | blktrace | 0:1.0.5-9.amzn2 |
| Amazon Linux · 2 | blktrace-debuginfo | 0:1.0.5-9.amzn2 |
Vulnerabilities 1
-
Unscored —
blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-10689.html