Vulnerabilities > CVE-2019-1010127 - Use After Free vulnerability in Vcftools Project Vcftools 0.1.13/0.1.14

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.

Vulnerable Configurations

Part Description Count
Application
Vcftools_Project
2

Common Weakness Enumeration (CWE)