CVE-2021-37501

Опубликовано: 03 фев. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.

Ссылки

https://github.com/HDFGroup/hdf5
Product
Third Party Advisory
https://github.com/HDFGroup/hdf5/issues/2458
https://github.com/ST4RF4LL/Something_Found/blob/main/HDF5_v1.13.0_h5dump_heap_overflow.md
Exploit
Third Party Advisory
https://github.com/HDFGroup/hdf5
Product
Third Party Advisory
https://github.com/HDFGroup/hdf5/issues/2458
https://github.com/ST4RF4LL/Something_Found/blob/main/HDF5_v1.13.0_h5dump_heap_overflow.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*

Версия от 1.12.0 (включая) до 1.13.0 (включая)

EPSS

Процентиль: 18%

0.00057

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-37501

CVSS3: 7.5

ubuntu

больше 2 лет назад

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.

CVE-2021-37501

CVSS3: 7.5

redhat

около 2 лет назад

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.

CVE-2021-37501

CVSS3: 7.5

msrc

больше 2 лет назад

Описание отсутствует

CVE-2021-37501

CVSS3: 7.5

debian

больше 2 лет назад

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1 ...

SUSE-SU-2023:1563-1

suse-cvrf

около 2 лет назад

Security update for hdf5

EPSS

Процентиль: 18%

0.00057

Низкий

7.5 High

CVSS3

Дефекты

CWE-787