CVE-2018-14329: Race Condition
Published Jul 17, 2018
·Updated
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack.
Affected Software
1 affected component
HTSlib HTSlib=1.8
Event History
Jul 17, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires local access and low-level privileges. The attacker must also satisfy high attack-complexity conditions; no user interaction is required.
2
What is the potential impact of successful exploitation?
A successful symlink race may allow an attacker to overwrite arbitrary files. The reported CVSS vector indicates integrity impact only, with no stated confidentiality or availability impact.
3
Which HTSlib version is identified as affected?
The issue is reported in HTSlib 1.8.