PatchTheCVEburrow-wheeler aligner vulnerabilities and fixes
Recent CVEs affecting burrow-wheeler aligner, with upgrade or downgrade steps. 2 tracked.
Also searched as: burrow wheeler aligner, burrow-wheeleraligner.
burrow-wheeler aligner has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-04-20. Highest priority: CVE-2019-10269 (score 71/100).
- CVE-2019-11371 CRITICAL 9.8 DOWNGRADE BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bn
- CVE-2019-10269 CRITICAL 9.8 UPGRADE MITIGATE BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore functi
FAQ
How do I fix burrow-wheeler aligner vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is burrow-wheeler aligner being exploited right now?
None of the tracked burrow-wheeler aligner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which burrow-wheeler aligner CVE should I patch first?
CVE-2019-10269 currently ranks highest (71/100): BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore functi.