Описание
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset.
Отчет
This MODERATE impact stack-based buffer overflow in the HDF5 library (H5FD_sec2_read) could lead to a denial of service or potentially arbitrary code execution. Exploitation requires processing a specially crafted HDF5 file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | hdf5 | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | hdf5 | Will not fix | ||
| Red Hat OpenStack Platform 10 (Newton) | hdf5 | Will not fix | ||
| Red Hat OpenStack Platform 12 (Pike) | hdf5 | Affected | ||
| Red Hat OpenStack Platform 13 (Queens) | hdf5 | Will not fix | ||
| Red Hat OpenStack Platform 14 (Rocky) | hdf5 | Will not fix | ||
| Red Hat OpenStack Platform 8 (Liberty) | hdf5 | Will not fix | ||
| Red Hat OpenStack Platform 9 (Mitaka) | hdf5 | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset.
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset.
An issue was discovered in the HDF HDF5 1.8.20 library. There is a sta ...
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset.
EPSS
5.3 Medium
CVSS3