CVE-2018-13845
htslib-test: An issue has been found in HTSlib 1.8
CVE-2018-13845 is fixed in 3 products on 1 platform, first by htslib-test 1.7-2ubuntu0.1~esm1, released July 10, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0170
77th percentile
An issue has been found in HTSlib 1.8. It is a buffer over-read in sam_parse1 in sam.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| htslib-test · Ubuntu 18.04.6 LTS (bionic) | 1.7-2ubuntu0.1~esm1 | htslib-test 1.7-2ubuntu0.1~esm1 | Jul 10, 2018 |
| libhts2 · Ubuntu 18.04.6 LTS (bionic) | 1.7-2ubuntu0.1~esm1 | libhts2 1.7-2ubuntu0.1~esm1 | Jul 10, 2018 |
| tabix · Ubuntu 18.04.6 LTS (bionic) | 1.7-2ubuntu0.1~esm1 | tabix 1.7-2ubuntu0.1~esm1 | Jul 10, 2018 |