CVE-2018-13844

HTSlib 1.8 contains a memory leak in fai_read (faidx.c). The issue is disputed: some sources attribute it to the test harness rather than HTSlib, and users are warned to destruct the object returned by fai_load() in their code. Concrete vulnerability details such as exploit vectors, affected vers...

CVE-2018-13845

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

CVE-2018-13843

An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...

CVE-2018-13844

An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...

CVE-2018-13845

HTSlib 1.8 contains CVE-2018-13845: a buffer over-read in sam_parse1 (sam.c). Public sources (OSV, Ubuntu USN-4802-1, Ubuntu OSS) describe the impact as a denial-of-service condition for this CVE. No remediation details are provided in the supplied documents.

CVE-2018-13845

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

CVE-2018-13844

An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...

CVE-2018-13843

An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...

PT-2018-12217 · Htslib · Htslib

Name of the Vulnerable Software and Affected Versions: HTSlib version 1.8 Description: An issue has been found in HTSlib, which is a memory leak in fai read in faidx.c. It has been disputed that this issue exists in the test harness and that HTSlib users would be aware of the need to destruct the...

samtools htslib library CRAM rANS codec buffer overflow vulnerability

The samtools htslib library is a C language library for high throughput sequencing data formats. cram rANS codec is one of the codecs. A buffer overflow vulnerability exists in the CRAM rANS codec in samtools htslib library version 1.4.0 and earlier. An attacker can exploit this vulnerability to...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

Buffer overflow

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

UBUNTU-CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

DEBIAN-CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

CVE-2017-1000206 affects samtools htslib (CRAM rANS codec) with buffer overflow in version 1.4.0 and earlier. The vulnerability could allow arbitrary code execution on impacted systems. Public sources in the connected set reference Linux distributions (Ubuntu, Red Hat, Debian/OSV) and security ad...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...