1121 matches found
Race condition
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
CVE-2018-14329: In HTSlib 1.8, a race condition in cram/cram_io.c can allow local users to overwrite arbitrary files via a symlink attack. Exploitation details are not described in the provided connected documents; no patch/version remediation is listed. Impact is local unauthorized file modifica...
Design/Logic Flaw
DISPUTED An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
Buffer overflow
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
Privilege escalation
DISPUTED An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library...
CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
CVE-2018-13843
An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...
CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
CVE-2018-13843
An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...
CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
PT-2018-12217 · Htslib · Htslib
Name of the Vulnerable Software and Affected Versions: HTSlib version 1.8 Description: An issue has been found in HTSlib, which is a memory leak in fai read in faidx.c. It has been disputed that this issue exists in the test harness and that HTSlib users would be aware of the need to destruct the...
PT-2018-12216 · Htslib · Htslib
Name of the Vulnerable Software and Affected Versions: HTSlib version 1.8 Description: The issue is a memory leak in the bgzf getline function in bgzf.c. The software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library...
[SECURITY] Fedora 28 Update: bouncycastle-1.59-1.fc28
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8...
[SECURITY] Fedora 27 Update: bouncycastle-1.59-1.fc27
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Performance Tester.
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 and 1.7 used by Rational Performance Tester. These issues were disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Performance Tester.
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 and 1.7 used by Rational Performance Tester. These issues were disclosed as part of the IBM Java SDK updates in July 2017. Vulnerability Details If you run your own Java code using the IBM Java Runtime...
CVE-2018-1002100
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files...