CVE-2018-13845: Critical severity htslib vulnerability
Published Jul 10, 2018
·Updated
An issue has been found in HTSlib 1.8. It is a buffer over-read in samparse1 in sam.c.
Affected Software
1 affected component
HTSlib HTSlib=1.8
Event History
Jul 10, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation is network-accessible and requires no privileges or user interaction. The vulnerability has low attack complexity.
2
What security impact could successful exploitation have?
The CVSS rating indicates potential high impact to confidentiality, integrity, and availability. It is rated critical with a CVSS 3.0 base score of 9.8.
3
Which HTSlib version is identified as affected?
The provided information identifies HTSlib 1.8 as containing the buffer over-read in sam_parse1 in sam.c.