8.6

CVE-2016-4331

Exploit
When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hdfgroup ≫ Hdf5 Version1.8.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.76% 0.505
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.6 1.8 6
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.debian.org/security/2016/dsa-3727
https://security.gentoo.org/glsa/201701-13
http://www.securityfocus.com/bid/94411
http://www.talosintelligence.com/reports/TALOS-2016-0177/
Third Party Advisory
Exploit
Technical Description