PT-2018-10395 · Hdf+2 · Hdf5+2

Publicado

2018-05-16

·

Atualizado

2024-09-05

·

CVE-2018-11205

CVSS v3.1

8.1

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.2
Description A remote denial of service or information disclosure attack could be allowed due to an out of bounds read discovered in H5VM memcpyvv in H5VM.c.
Recommendations For version 1.10.2, consider updating to a newer version that contains a fix for this issue, as no specific mitigation measures are provided for this version.

Exploit

Correção

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-11205
ECHO-BDB8-C572-5D9E
OPENSUSE-SU-2022_3827-1
OPENSUSE-SU-2022_3829-1
OPENSUSE-SU-2024_2195-1
OPENSUSE-SU-2024_3144-1
SUSE-SU-2022:3824-1
SUSE-SU-2022:3825-1
SUSE-SU-2022:3826-1
SUSE-SU-2022:3827-1
SUSE-SU-2022:3828-1
SUSE-SU-2022:3829-1
SUSE-SU-2022_3824-1
SUSE-SU-2022_3825-1
SUSE-SU-2022_3826-1
SUSE-SU-2022_3827-1
SUSE-SU-2022_3828-1
SUSE-SU-2022_3829-1
SUSE-SU-2024:2105-1
SUSE-SU-2024:2195-1
SUSE-SU-2024:3144-1

Produtos afetados

Debian
Hdf5
Suse