htslib:hts_open_fuzzer: Heap-buffer-overflow in arith_uncompress_to

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6501633183842304 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in le_to_u32

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6318532219109376 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x609000018801 Crash...

htslib:hts_open_fuzzer: Crash in vcf_parse_format

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5755637137670144 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerubsanhtslib Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe46ff161c0 Crash...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5755386700496896 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

htslib:hts_open_fuzzer: Crash in vcf_parse_format

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5085640728510464 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ffe537965c8 Crash...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5082614308536320 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

htslib:hts_open_fuzzer: Crash in hpeek

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5711296702185472 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerubsanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000010000 Crash...

htslib:hts_open_fuzzer: Crash in vcf_format

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5652579714859008 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605a05a69770 Crash...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_log

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5760144234774528 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x606000006c00 Crash...

UBUNTU-CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

DEBIAN-CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

Race condition

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329

CVE-2018-14329: In HTSlib 1.8, a race condition in cram/cram_io.c can allow local users to overwrite arbitrary files via a symlink attack. Exploitation details are not described in the provided connected documents; no patch/version remediation is listed. Impact is local unauthorized file modifica...

PT-2018-12444

Name of the Vulnerable Software and Affected Versions HTSlib version 1.8 Description A race condition exists in the cram/cram io.c file of HTSlib, potentially allowing local users to overwrite arbitrary files via a symlink attack. Recommendations For HTSlib version 1.8, consider restricting acces...