Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-14033

Опубликовано: 13 июл. 2018
Источник: debian
EPSS Низкий

Описание

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
hdf5fixed1.14.5+repack-1package

Примечания

  • https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md

  • Negligible security impact

  • Fixed in 1.10.x-series in 1.10.8 https://forum.hdfgroup.org/t/release-of-hdf5-1-10-8-newsletter-180/9108

EPSS

Процентиль: 68%
0.0055
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.

CVSS3: 5.3
redhat
больше 7 лет назад

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.

CVSS3: 8.8
nvd
больше 7 лет назад

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.

suse-cvrf
больше 3 лет назад

Security update for hdf5

EPSS

Процентиль: 68%
0.0055
Низкий