Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-6856

Опубликовано: 29 июн. 2025
Источник: debian
EPSS Низкий

Описание

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
hdf5fixed2.1.0+repack-1package

Примечания

  • https://github.com/HDFGroup/hdf5/issues/5574

  • https://github.com/HDFGroup/hdf5/pull/5829

  • https://github.com/HDFGroup/hdf5/commit/29c847a43db0cdc85b01cafa5a7613ea73932675 (2.0.0)

  • Negligible security impact

EPSS

Процентиль: 11%
0.00203
Низкий

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 1 года назад

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS3: 3.3
redhat
около 1 года назад

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS3: 3.3
nvd
около 1 года назад

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS3: 3.3
msrc
12 месяцев назад

HDF5 H5FL.c H5FL__reg_gc_list use after free

CVSS3: 3.3
github
около 1 года назад

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 11%
0.00203
Низкий