224 matches found
CVE-2018-14329: Improper Link Resolution Before File Access
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-13844
An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
CVE-2018-13843
An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...
CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
Design/Logic Flaw
DISPUTED An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
CVE-2018-13844
An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
Privilege escalation
DISPUTED An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library...
CVE-2018-13844
An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
CVE-2018-13843
An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...
CVE-2018-13843
An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...
CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
Buffer overflow
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
UBUNTU-CVE-2018-13845
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...
DEBIAN-CVE-2018-13843
An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...
UBUNTU-CVE-2018-13843
DISPUTED An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library...
CVE-2018-13844
HTSlib 1.8 contains a memory leak in fai_read (faidx.c). The issue is disputed: some sources attribute it to the test harness rather than HTSlib, and users are warned to destruct the object returned by fai_load() in their code. Concrete vulnerability details such as exploit vectors, affected vers...
CVE-2018-13844
An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
CVE-2018-13843
HTSlib 1.8 contains a memory leak in bgzf_getline (bgzf.c). The maintainer’s position is that the issue can be fixed in applications using the HTSlib library rather than a library-level fix, e.g., by ensuring memory is freed by the consuming code. No exploit/vector details are provided in the sou...
CVE-2018-13844
An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...