PT-2018-12216 · Htslib · Htslib

Fcorleone · CVE-2018-13843 · Publicado 2018-07-10 · Atualizado 2024-08-05

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HTSlib version 1.8

Description The issue is a memory leak in the bgzf getline function in bgzf.c. The software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library.

Recommendations For HTSlib version 1.8, consider fixing the memory leak in applications that use the HTSlib library, such as by properly freeing memory in the bgzf getline function.

Exploit

Correção

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2018-13843

Produtos afetados

Htslib

Referências · 9

• 🔥 https://github.com/samtools/htslib/issues/731#issue-339662537 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-13843 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-13843 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-13843 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13843 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13843 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2018-13843 · Aviso do Fabricante
• https://t.me/cvenotify/89154 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2018-13843 · Aviso do Fabricante