CVE-2018-11206
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de hdf5 · Página 7
Vulnerabilidades publicadas para hdf5 en los últimos 30 días: 2. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 126
CVE-2017-17509
In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
Publicación ActualizaciónCVE-2017-17508
In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Actualiza a 1.8.16+docs-4ubuntu1.1+esm1
Publicación ActualizaciónCVE-2017-17507
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Publicación ActualizaciónCVE-2017-17506
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Actualiza a 1.8.16+docs-4ubuntu1.1+esm1
Publicación ActualizaciónCVE-2017-17505
In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- Actualiza a 1.8.16+docs-4ubuntu1.1+esm1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.