CVE-2018-13844

Published: Jul 10, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by fai_load() in their own code

Affected (1)

Products: Htslib: Htslib

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Htslib Htslib	Version 1.8

Related CWEs

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://github.com/samtools/htslib/issues/731#issuecomment-403675330

Source: cve@mitre.org

Third Party Advisory

https://github.com/samtools/htslib/issues/731#issuecomment-403675330

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.