Описание
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | ignored | end of standard support, was needed |
| cosmic | not-affected | 0.1.16-1 |
| devel | not-affected | 0.1.16-1 |
| disco | not-affected | 0.1.16-1 |
| eoan | not-affected | 0.1.16-1 |
| esm-apps/bionic | released | 0.1.15-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 0.1.16-1 |
| esm-apps/jammy | not-affected | 0.1.16-1 |
| esm-apps/xenial | released | 0.1.14+dfsg-2ubuntu0.1 |
Показывать по
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1 ...
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
Уязвимость функции header::add_INFO_descriptor пакета для работы с VCF-файлами VCFtools, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
4.3 Medium
CVSS2
5.5 Medium
CVSS3