CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It may be remotely exploitable.
CVE
CVE-2018-11099
Severity
MEDIUM
CVSS
5.5
EPSS
1.52%
Original NVD Description
The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
Related CVEs
Other vulnerabilities affecting the same vendor(s)