Summary
It was discovered that HTSlib incorrectly handled certain data. An attacker
could possibly use this issue to execute arbitrary code. This issue affected only Ubuntu
16.04 ESM. (CVE-2017-1000206)
It was discovered that HTSlib incorrectly handled certain files. An
attacker could possibly use this issue to cause a denial of service.
(CVE-2018-13845)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | htslib | 0.2.0~rc3-1ubuntu0.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | htslib | 1.2.1-2ubuntu1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | htslib | 1.7-2ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in …
-
Unscored —
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.