Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-4331

Опубликовано: 18 нояб. 2016
Источник: nvd
CVSS3: 8.6
CVSS2: 6.9
EPSS Низкий

Описание

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hdfgroup:hdf5:1.8.16:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.0045
Низкий

8.6 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.6
ubuntu
около 9 лет назад

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

CVSS3: 8.6
redhat
около 9 лет назад

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

CVSS3: 8.6
debian
около 9 лет назад

When decoding data out of a dataset encoded with the H5Z_NBIT decoding ...

CVSS3: 8.6
github
больше 3 лет назад

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

EPSS

Процентиль: 63%
0.0045
Низкий

8.6 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-787