Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
152 results · page 3 of 4
Mar 22, 2020An issue was discovered in HDF5 through 1.12.0.CVE-2020-10811 · Other software · Hdfgroup · reported by MITREMedium 5.5
An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbitbucket.hdfgroup.orggithub.com
Mar 22, 2020An issue was discovered in HDF5 through 1.12.0.CVE-2020-10810 · Other software · Hdfgroup · reported by MITREMedium 5.5
An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbitbucket.hdfgroup.orggithub.com
Mar 22, 2020An issue was discovered in HDF5 through 1.12.0.CVE-2020-10809 · Other software · Hdfgroup · reported by MITREMedium 5.5
An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbitbucket.hdfgroup.orggithub.com
Feb 25, 2019An issue was discovered in the HDF HDF5 1.10.4 library.CVE-2019-9152 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 25, 2019An issue was discovered in the HDF HDF5 1.10.4 library.CVE-2019-9151 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 17, 2019An issue was discovered in the HDF HDF5 1.10.4 library.CVE-2019-8398 · Other software · Hdfgroup · reported by MITREMedium 6.5
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 17, 2019An issue was discovered in the HDF HDF5 1.10.4 library.CVE-2019-8397 · Other software · Hdfgroup · reported by MITREMedium 6.5
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 17, 2019A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 fCVE-2019-8396 · Other software · Hdfgroup · reported by MITREMedium 6.5
A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018An issue was discovered in the HDF HDF5 1.10.3 library.CVE-2018-17439 · Other software · Hdfgroup · reported by MITREMedium 6.5
An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF fileCVE-2018-17438 · Other software · Hdfgroup · reported by MITREMedium 6.5
A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memoryCVE-2018-17437 · Other software · Hdfgroup · reported by MITREMedium 6.5
Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.debian.org
Sep 24, 2018ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file.CVE-2018-17436 · Other software · Hdfgroup · reported by MITREMedium 6.5
ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a craftCVE-2018-17435 · Other software · Hdfgroup · reported by MITREMedium 6.5
A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDCVE-2018-17434 · Other software · Hdfgroup · reported by MITREMedium 6.5
A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.debian.org
Sep 24, 2018A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a craftCVE-2018-17433 · Other software · Hdfgroup · reported by MITREMedium 6.5
A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crCVE-2018-17432 · Other software · Hdfgroup · reported by MITREMedium 6.5
A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2018A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF filCVE-2018-17237 · Other software · Hdfgroup · reported by MITREMedium 6.5
A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.debian.org
Sep 20, 2018Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory CVE-2018-17234 · Other software · Hdfgroup · reported by MITREMedium 6.5
Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.debian.org
Sep 20, 2018A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of aCVE-2018-17233 · Other software · Hdfgroup · reported by MITREMedium 6.5
A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.debian.org
Sep 3, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-16438 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 21, 2018An issue was discovered in the HDF HDF5 1.10.2 library.CVE-2018-15671 · Other software · Hdfgroup · reported by MITREMedium 6.5
An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 20, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-14460 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-14035 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-14034 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-14033 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-14031 · Other software · Hdfgroup · reported by MITREHigh 8.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13876 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDread.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13875 · Other software · Hdfgroup · reported by MITREHigh 7.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in H5VM.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13874 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related to HDmemset.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13873 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5O_chunk_deserialize in H5Ocache.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13872 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_decode in H5Gent.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13871 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13870 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13869 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13868 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13867 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2018An issue was discovered in the HDF HDF5 1.8.20 library.CVE-2018-13866 · Other software · Hdfgroup · reported by MITRECritical 9.8
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_addr_decode_len in H5Fint.c.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2018A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library.CVE-2018-11207 · Other software · Hdfgroup · reported by MITREMedium 6.5
A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2018An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library.CVE-2018-11206 · Other software · Hdfgroup · reported by MITREHigh 8.1
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2018A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library.CVE-2018-11205 · Other software · Hdfgroup · reported by MITREHigh 8.1
A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2018A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library.CVE-2018-11204 · Other software · Hdfgroup · reported by MITREMedium 6.5
A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2018A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library.CVE-2018-11203 · Other software · Hdfgroup · reported by MITREMedium 6.5
A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2018A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library.CVE-2018-11202 · Other software · Hdfgroup · reported by MITREMedium 6.5
A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2017In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a.CVE-2017-17509 · Other software · Hdfgroup · reported by MITREHigh 8.8
In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2017In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a.CVE-2017-17508 · Other software · Hdfgroup · reported by MITREMedium 6.5
In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2017In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a.CVE-2017-17507 · Other software · Hdfgroup · reported by MITREMedium 6.5
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2017In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a.CVE-2017-17506 · Other software · Hdfgroup · reported by MITREMedium 6.5
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2017In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a.CVE-2017-17505 · Other software · Hdfgroup · reported by MITREMedium 6.5
In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2016The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value wiCVE-2016-4333 · Other software · Hdfgroup · reported by cret@cert.orgHigh 8.6
The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Nov 18, 2016The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure aCVE-2016-4332 · Other software · Hdfgroup · reported by cret@cert.orgHigh 8.6
The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library.
- Product
- Hdf5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.