CVE-2020-18232 - hdf5: Buffer Overflow in function H5S_close in H5S.c

Back Back to CVE browser

HIGH

hdf5: Buffer Overflow in function H5S_close in H5S.c

Published Aug 22, 2023

8.8

HIGH

CVSS 3.1

EPSS 1.09%

Description

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

Affected products

Product	Package	State	Advisory
Red Hat OpenStack Platform 16.1	hdf5	Will not fix	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (5)

https://access.redhat.com/security/cve/CVE-2020-18232
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2234888
Issue Tracking
https://github.com/winson2004aa/PAAFS/tree/master/vul2
ExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-18232
https://www.cve.org/CVERecord?id=CVE-2020-18232

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2020-18232		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2234888		Issue Tracking
https://github.com/winson2004aa/PAAFS/tree/master/vul2		ExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-18232
https://www.cve.org/CVERecord?id=CVE-2020-18232