Vulnerability Details CVE-2019-10269
BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2019-10269
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.5.10
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.5.9
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.6.0
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.6.1
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.6.2
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.0
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.1
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.10
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.11
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.12
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.13
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.15
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.16
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.17
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.2
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.3
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.5
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.7
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.8
-
cpe:2.3:a:burrow-wheeler_aligner_project:burrow-wheeler_aligner:0.7.9
-
cpe:2.3:o:canonical:ubuntu_linux:18.04
-
cpe:2.3:o:canonical:ubuntu_linux:19.04