224 matches found
htslib:hts_open_fuzzer: Segv on unknown address in process_one_read
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6517415765147648 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
htslib:hts_open_fuzzer: Negative-size-param in vcf_parse_format
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6224153222905856 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
htslib:hts_open_fuzzer: Null-dereference READ in bgzf_open_ref
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5358808228495360 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...
htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_log
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4989422449786880 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
htslib:hts_open_fuzzer: Heap-buffer-overflow in bam_aux_get
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5262975590006784 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000005058 Crash...
htslib:hts_open_fuzzer: Heap-buffer-overflow in process_one_read
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6707644370649088 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000005697 Crash...
Ubuntu 16.04 ESM / 18.04 ESM : HTSlib vulnerabilities (USN-4802-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4802-1 advisory. It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This iss...
htslib:hts_open_fuzzer: Heap-buffer-overflow in uint7_get_64
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5097832530706432 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
SUSE CVE-2018-13844
An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...
SUSE CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
Ubuntu: Security Advisory (USN-4802-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2022-1962 htslib security update
HTSlib is an implementation of a unified C library for accessing common file formats, such as SAM, CRAM and VCF, used for high-throughput sequencing data, and is the core library used by samtools and bcftools. HTSlib only depends on zlib. It is known to be compatible with gcc, g++ and clang. HTSl...
OESA-2022-1963 htslib security update
HTSlib is an implementation of a unified C library for accessing common file formats, such as SAM, CRAM and VCF, used for high-throughput sequencing data, and is the core library used by samtools and bcftools. HTSlib only depends on zlib. It is known to be compatible with gcc, g++ and clang. HTSl...
vcf_parse_format Heap Buffer Overflow DoS
The vulnerability of the vcfparseformat function in the library, which allows access to common file formats in HTSlib, lies in the check that only individual fields have excessive sizes. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...
htslib:hts_open_fuzzer: Dynamic-stack-buffer-overflow in bcf_fmt_sized_array
Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6226486104293376 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
DEBIAN-CVE-2020-36403
HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...
