158 matches found
Design/Logic Flaw
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
CVE-2020-36403
HTSlib up to version 1.10.2 is affected by CVE-2020-36403, which enables an out-of-bounds write in vcf_parse_format (invoked by vcf_parse and vcf_read). The issue is present in HTSlib’s handling of VCF parsing, with impact described as out-of-bounds write. Several connected sources confirm the vu...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
PT-2021-6593 · Htslib +1 · Htslib +1
Name of the Vulnerable Software and Affected Versions: HTSlib versions prior to 1.10.2 Description: The issue is related to the vcf parse format function in the HTSlib library, which does not properly check for excessive record size, allowing only individual fields to be checked. This can be...
USN-4802-1 htslib vulnerabilities
It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This issue affected only Ubuntu 16.04 ESM. CVE-2017-1000206 It was discovered that HTSlib incorrectly handled certain files. An attacker could possibly use this iss...
USN-4802-1: HTSlib vulnerabilities
It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This issue affected only Ubuntu 16.04 ESM. CVE-2017-1000206 It was discovered that HTSlib incorrectly handled certain files. An attacker could possibly use this iss...
htslib:hts_open_fuzzer: Heap-buffer-overflow in le_to_u32
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6318532219109376 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x609000018801 Crash...
htslib:hts_open_fuzzer: Crash in vcf_parse_format
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5755637137670144 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerubsanhtslib Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe46ff161c0 Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5755386700496896 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
htslib:hts_open_fuzzer: Crash in vcf_parse_format
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5085640728510464 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ffe537965c8 Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5082614308536320 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
htslib:hts_open_fuzzer: Crash in hpeek
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5711296702185472 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerubsanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000010000 Crash...
htslib:hts_open_fuzzer: Crash in vcf_format
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5652579714859008 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605a05a69770 Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_log
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5760144234774528 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x606000006c00 Crash...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
UBUNTU-CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...