EPSS
Percentile
83.5%
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
seclists.org/fulldisclosure/2018/May/43
lists.debian.org/debian-lts-announce/2019/05/msg00039.html
usn.ubuntu.com/3974-1/