CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.

Score

CVSS 3.1 4.7 Medium

Status

Modified - cve@mitre.org

Published

2018-07-17

Last modified

2024-08-05

Weaknesses

CWE-362, CWE-59

Affected products

• Htslib (Htslib)

References

• https://github.com/samtools/htslib/issues/736