USN-4835-1: VCFtools vulnerabilities

🗓️ 16 Mar 2021 19:51:26Reported by UbuntuType

ubuntu

ubuntu🔗 ubuntu.com👁 32 Views

VCFtools vulnerabilities in Ubuntu 18.04 and 14.04 ESM, including improper input handling and memory vulnerabilities

Reporter	Title	Published	Views	Family All 59
BDU FSTEC	The vulnerability of the header::add_INFO_descriptor function in the VCF file handling package VCFtools allows a perpetrator to gain unauthorized access to protected information.	16 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the header::add_INFO_descriptor function in the VCF file handling package VCFtools allows a attacker to cause a service failure.	16 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the header::add_FORMAT_descriptor function in the VCF file handling package VCFtools allows a attacker to cause a service failure.	16 Apr 202000:00	–	bdu_fstec
CNVD	VCFtools header::add_FORMAT_descriptor function denial of service vulnerability	18 May 201800:00	–	cnvd
CNVD	VCFtools header::add_INFO_descriptor function denial of service vulnerability	18 May 201800:00	–	cnvd
CNVD	VCFtools header::add_INFO_descriptor function information disclosure vulnerability	18 May 201800:00	–	cnvd
CNVD	VCFtools Resource Management Error Vulnerability	26 Jul 201900:00	–	cnvd
Check Point Advisories	VCFtools Use-after-free (CVE-2018-11130)	18 Sep 202200:00	–	checkpoint_advisories
CVE	CVE-2018-11099	17 May 201819:00	–	cve
CVE	CVE-2018-11129	17 May 201819:00	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	14.04	any	vcftools	0.1.11+dfsg-1ubuntu0.1~esm1	vcftools_0.1.11+dfsg-1ubuntu0.1~esm1_any.deb
Ubuntu	18.04	any	vcftools	0.1.15-1ubuntu0.1~esm1	vcftools_0.1.15-1ubuntu0.1~esm1_any.deb

16 Mar 2021 19:51Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8

CVSS 37.8

EPSS0.22369

vcftools ubuntu 18.04 esm ubuntu 14.04 esm input handling memory vulnerabilities use-after-free crafted input file sensitive information arbitrary code cve-2018-11099 cve-2018-11129 cve-2018-11130 cve-2019-1010127