Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-10809

Опубликовано: 22 мар. 2020
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*
Версия до 1.12.0 (включая)

EPSS

Процентиль: 64%
0.00479
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS3: 5.5
redhat
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS3: 5.5
debian
больше 5 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer ov ...

github
около 3 лет назад

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость функции Decompress() в файле decompress.c. библиотеки HDF5, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 64%
0.00479
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787