CVE-2018-14329 - In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack

MEDIUM

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack

Published Jul 17, 2018

4.7

MEDIUM

CVSS 3.1

EPSS 0.25%

In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.

No remediation recorded yet.

Weaknesses (2)

CWE-362

Race Condition

CWE-59

Link	Providers	Tags
https://github.com/samtools/htslib/issues/736		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 17, 2018

Updated Aug 5, 2024

Reserved Jul 16, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a