PT-2018-12216 · Htslib · Htslib

Fcorleone · Published 2018-07-10 · Updated 2024-08-05 · CVE-2018-13843

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HTSlib version 1.8

Description The issue is a memory leak in the bgzf getline function in bgzf.c. The software maintainer's position is that the "failure to free memory" can be fixed in applications that use the HTSlib library.

Recommendations For HTSlib version 1.8, consider fixing the memory leak in applications that use the HTSlib library, such as by properly freeing memory in the bgzf getline function.

Exploit

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2018-13843

Affected Products

Htslib

References · 9

• 🔥 https://github.com/samtools/htslib/issues/731#issue-339662537 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-13843 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-13843 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-13843 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13843 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13843 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-13843 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13843 · Vendor Advisory
• https://t.me/cvenotify/89154 · Telegram Post