Summary
It was discovered that VCFtools improperly handled certain input. If a user
was tricked into opening a crafted input file, VCFtools could be made to crash.
(CVE-2018-11099, CVE-2018-11129, CVE-2018-11130)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | vcftools | 0.1.14+dfsg-2ubuntu0.1 |
Vulnerabilities 3
-
Unscored —
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information …
-
Unscored —
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of …
-
Unscored —CVE-2018-11130 EPSS 20%
The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial o…