CVE-2018-13843

An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...

CVE-2018-13845

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

CVE-2018-13845

HTSlib 1.8 contains CVE-2018-13845: a buffer over-read in sam_parse1 (sam.c). Public sources (OSV, Ubuntu USN-4802-1, Ubuntu OSS) describe the impact as a denial-of-service condition for this CVE. No remediation details are provided in the supplied documents.

CVE-2018-13845

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

CVE-2018-13843

An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...

CVE-2018-13844

An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...

CVE-2018-13845

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

PT-2018-12217 · Htslib · Htslib

Name of the Vulnerable Software and Affected Versions: HTSlib version 1.8 Description: An issue has been found in HTSlib, which is a memory leak in fai read in faidx.c. It has been disputed that this issue exists in the test harness and that HTSlib users would be aware of the need to destruct the...

CVE-2018-13844: Missing Release of Memory after Effective Lifetime

An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...

CVE-2018-13843: Missing Release of Resource after Effective Lifetime

An issue has been found in HTSlib 1.8. It is a memory leak in bgzfgetline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library such as test/testbgzf.c in the original report and is not a library issue...

PT-2018-12218

Name of the Vulnerable Software and Affected Versions HTSlib version 1.8 Description A buffer over-read issue has been discovered in the sam parse1 function within the sam.c file. Recommendations For HTSlib version 1.8, at the moment, there is no information about a newer version that contains a...

CVE-2018-13845: Out-of-bounds Read

An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c...

samtools htslib library CRAM rANS codec buffer overflow vulnerability

The samtools htslib library is a C language library for high throughput sequencing data formats. cram rANS codec is one of the codecs. A buffer overflow vulnerability exists in the CRAM rANS codec in samtools htslib library version 1.4.0 and earlier. An attacker can exploit this vulnerability to...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

UBUNTU-CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

Buffer overflow

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

DEBIAN-CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

CVE-2017-1000206 affects samtools htslib (CRAM rANS codec) with buffer overflow in version 1.4.0 and earlier. The vulnerability could allow arbitrary code execution on impacted systems. Public sources in the connected set reference Linux distributions (Ubuntu, Red Hat, Debian/OSV) and security ad...