Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq3f-wxh6-25rp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

EPSS

Процентиль: 64%
0.00479
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS3: 5.5
redhat
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS3: 5.5
nvd
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS3: 5.5
debian
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer ov ...

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость функции Decompress() в файле decompress.c. библиотеки HDF5, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 64%
0.00479
Низкий