Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21077
HistoryAug 08, 2019 - 12:07 a.m.

Buffer Overflow

2019-08-0800:07:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.002 Low

EPSS

Percentile

55.5%

blktrace (aka Block IO Tracing) is vulnerable to buffer overflow attacks. This exists in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file. This may leads to a application crash.

CPENameOperatorVersion
blktraceeq1.0.5__8.el7