Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pg49-p7jf-3q72

Опубликовано: 23 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 20%
0.00064
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 3 лет назад

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.8
redhat
около 3 лет назад

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.8
nvd
около 3 лет назад

An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.8
debian
около 3 лет назад

An out-of-bounds write vulnerability exists in the gif2h5 functionalit ...

CVSS3: 7.8
fstec
около 3 лет назад

Уязвимость компонента decompress.c библиотеки HDF5 libhdf5, позволяющая нарушителю выполнить произвольный код в целевой системе

EPSS

Процентиль: 20%
0.00064
Низкий

7.8 High

CVSS3

Дефекты

CWE-787