Описание
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 16.1 | hdf5 | Out of support scope | ||
| Red Hat Enterprise Linux AI 1.5 for RHEL 9.4 | hdf5 | Fixed | RHSA-2025:3801 | 10.04.2025 |
| Red Hat Enterprise Linux AI 1.5 for RHEL 9.4 | libaec | Fixed | RHSA-2025:3801 | 10.04.2025 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2280037hdf5: multiple CVEs
Связанные уязвимости
CVSS3: 7.4
ubuntu
около 1 года назад
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.
CVSS3: 7.4
nvd
около 1 года назад
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.
CVSS3: 7.4
debian
около 1 года назад
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in ...
CVSS3: 7.4
github
около 1 года назад
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.