VCFtools header::add_INFO_descriptor function information disclosure vulnerability

VCFtools is a package for working with VCF files. An information disclosure vulnerability exists in the header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15. A remote attacker can exploit this vulnerability via a specially crafted vcf file to cause an information disclosure...

CVE-2018-11099

The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...

CVE-2018-11129

The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted vcf file...