CVE-2018-14329

2018-07-1702:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.

CPENameOperatorVersion
htslibeq1.7
htslibeq1.3
htslibeq1.5
htslibeq0.2.0-rc9
htslibeq0.2.0-rc8
htslibeq0.2.0-rc11
htslibeq0.2.0-rc6
htslibeq1.2.1
htslibeq0.2.0-rc12
htslibeq1.8

Name	Operator	Version
htslib	eq	1.7
htslib	eq	1.3
htslib	eq	1.5
htslib	eq	0.2.0-rc9
htslib	eq	0.2.0-rc8
htslib	eq	0.2.0-rc11
htslib	eq	0.2.0-rc6
htslib	eq	1.2.1
htslib	eq	0.2.0-rc12
htslib	eq	1.8

Rows per page:

1-10 of 281

References

github.com/samtools/htslib/issues/736