CVE Catalog

CVE-2017-1000206

Critical
Published: Translated: NVD NIST

Summary

The samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec, potentially leading to arbitrary code execution.

Risk Assessment

Exploitation of this vulnerability could allow attackers to execute malicious code on the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update the samtools htslib library to a version newer than 1.4.0 to mitigate this vulnerability.

Original NVD description (English source)

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution

Vulnerability data from NVD (NIST) · CISA KEV · EPSS