CVE-2024-32613

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 7.4

EPSS Низкий

Описание

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612.

Ссылки

https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
Issue Tracking
Vendor Advisory
https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*

Версия до 1.14.4 (исключая)

EPSS

Процентиль: 20%

0.00063

Низкий

7.4 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVE-2024-32613

CVSS3: 7.4

ubuntu

около 1 года назад

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612.

CVE-2024-32613

redhat

около 1 года назад

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612.

CVE-2024-32613

CVSS3: 7.4

msrc

около 1 года назад

Описание отсутствует

CVE-2024-32613

CVSS3: 7.4

debian

около 1 года назад

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in ...

GHSA-qxhm-4w63-54c7

CVSS3: 7.4

github

около 1 года назад

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerability than CVE-2024-32612.

EPSS

Процентиль: 20%

0.00063

Низкий

7.4 High

CVSS3

Дефекты

CWE-122