Page 2 of 19 results (0.004 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-17434

https://notcve.org/view.php?id=CVE-2018-17434

24 Sep 2018 — A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack. Se lanza una señal SIGFPE en la función apply_filters() de h5repack_filters.c en la biblioteca HDF HDF5 hasta la versión 1.10.3 durante un intento de análisis de un archivo HDF manipulado. Esto se debe a una protección incorrecta contra... • https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_apply_filters_h5repack_filters • CWE-369: Divide By Zero •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-17437

https://notcve.org/view.php?id=CVE-2018-17437

24 Sep 2018 — Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file. Fuga de memoria en la función H5O_dtype_decode_helper() en H5Odtype.c en la biblioteca HDF HDF5 hasta la versión 1.10.3 permite a los atacantes causar una denegación de servicio (consumo de recursos) utilizando un archivo .HDF5 manipulado. • https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln5#memory-leak-in-h5o_dtype_decode_helper • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-17234

https://notcve.org/view.php?id=CVE-2018-17234

20 Sep 2018 — Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file. Fuga de memoria en la función H5O__chunk_deserialize() en H5Ocache.c en la biblioteca HDF HDF5 hasta la versión 1.10.3 permite a los atacantes causar una denegación de servicio (consumo de recursos) utilizando un archivo .HDF5 manipulado. • https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln3#memory-leak---h5o__chunk_deserialize_memory_leak • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-17237

https://notcve.org/view.php?id=CVE-2018-17237

20 Sep 2018 — A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207. Se lanza una señal SIGFPE en la función H5D__chunk_set_info_real() de H5Dchunk.c en la biblioteca HDF HDF5 1.10.3 durante un intento de análisis de un archivo HDF manipulado. Esto se debe a una protección incorrecta contra divisiones entre cero. ... • https://github.com/SegfaultMasters/covering360/blob/master/HDF5/README.md#divided-by-zero---h5d__chunk_set_info_real_div_by_zero • CWE-369: Divide By Zero •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-17233

https://notcve.org/view.php?id=CVE-2018-17233

20 Sep 2018 — A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack. Se lanza una señal SIGFPE en la función H5D__create_chunk_file_map_hyper() de H5Dchunk.c en la biblioteca HDF HDF5 hasta la versión 1.10.3 durante un intento de análisis de un archivo HDF manipulado. Esto se debe a una protec... • https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln2#divided-by-zero---h5d__create_chunk_file_map_hyper_div_zero • CWE-369: Divide By Zero •

CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 1

CVE-2016-4330 – Gentoo Linux Security Advisory 201701-13

https://notcve.org/view.php?id=CVE-2016-4330

18 Nov 2016 — In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution. En el fallo de la librería HDF5 1.8.16 para comprobar el número de dimensiones de una matriz leída del archivo está dentro de los límites de espacio asignado para ello, se producirá un desbordamiento de búfer basado en memoria dinámica, lo que podría conducir a la... • http://www.debian.org/security/2016/dsa-3727 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 1

CVE-2016-4333 – Gentoo Linux Security Advisory 201701-13

https://notcve.org/view.php?id=CVE-2016-4333

18 Nov 2016 — The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it. La librería HDF5 1.8.16 que asigna espacio para la matric usando un valor del archivo tiene un impacto dentro del bucle para la inicializar dicha matriz permitiendo un valor dentro del arch... • http://www.debian.org/security/2016/dsa-3727 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 1

CVE-2016-4331 – Gentoo Linux Security Advisory 201701-13

https://notcve.org/view.php?id=CVE-2016-4331

18 Nov 2016 — When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution. Cuando se descodifican datos fuera de un conjunto de datos codificados con la decodificación H5Z_NBIT, la librería HDF5 1.8.16 fallará al asegurar que la precisión está dentro de los límites del tamaño que conduce a la ejecución de código arbitrario. Multiple vulnerabilities have been found in HDF5 which c... • http://www.debian.org/security/2016/dsa-3727 • CWE-787: Out-of-bounds Write •

CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 1

CVE-2016-4332 – Gentoo Linux Security Advisory 201701-13

https://notcve.org/view.php?id=CVE-2016-4332

18 Nov 2016 — The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library. El fallo de la librería para comprobar si ciertos tipos de mensajes soportan un indicador particular, la librería HDF5 1.8.16 emitirá la estructura para ... • http://www.debian.org/security/2016/dsa-3727 • CWE-20: Improper Input Validation •