PT-2016-5891 · Hdf+1 · Hdf5+1

Published 2016-11-18 · Updated 2018-04-24 · CVE-2016-4331

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.16

Description The issue arises when decoding data from a dataset encoded with the H5Z NBIT decoding in the HDF5 library, leading to a failure in ensuring that the precision is within the bounds of the size. This can result in arbitrary code execution.

Recommendations For HDF5 version 1.8.16, consider updating to a newer version that addresses this issue, as the current version fails to ensure precision bounds when decoding data with H5Z NBIT, potentially leading to arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2016-4331

DLA-771-1

DSA-3727-1

MGASA-2016-0425

OPENSUSE-SU-2018:1051-1

OPENSUSE-SU-2018:1056-1

OPENSUSE-SU-2018_1056-1

Affected Products

Hdf5

Suse

References · 43

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0177 · Exploit
• https://security.gentoo.org/glsa/201701-13 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-4331 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0425 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3727-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2018:1051-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4331 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4331 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4331 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-4331 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2018:1056-1 · Vendor Advisory
• http://debian.org/security/2016/dsa-3727 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4331 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4333 · Security Note