CVE-2018-14329

Published July 17th, 2018

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

3.3

LOW

Affected

1

PROJECT

Description

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.

samtools/htslib

C library for high-throughput sequencing data formats

GitHub

923