Vulnerability Description
The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hdfgroup | Hdf5 | 1.8.16 |
Related Weaknesses (CWE)
References
- http://www.debian.org/security/2016/dsa-3727
- http://www.securityfocus.com/bid/94416
- http://www.talosintelligence.com/reports/TALOS-2016-0179/ExploitTechnical DescriptionThird Party Advisory
- https://security.gentoo.org/glsa/201701-13
- http://www.debian.org/security/2016/dsa-3727
- http://www.securityfocus.com/bid/94416
- http://www.talosintelligence.com/reports/TALOS-2016-0179/ExploitTechnical DescriptionThird Party Advisory
- https://security.gentoo.org/glsa/201701-13
FAQ
What is CVE-2016-4333?
CVE-2016-4333 is a vulnerability with a CVSS score of 8.6 (HIGH). The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's termi...
How severe is CVE-2016-4333?
CVE-2016-4333 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4333?
Check the references section above for vendor advisories and patch information. Affected products include: Hdfgroup Hdf5.