Out of Bounds Read Vulnerability in HDF5 Library from The HDF Group
CVE-2018-16438

8.8HIGH

Key Information:

Vendor

Hdfgroup

Status
Hdf5
Vendor
CVE Published:
4 September 2018

What is CVE-2018-16438?

The HDF5 library version 1.8.20 developed by The HDF Group contains a vulnerability that allows for an out of bounds read in the H5L_extern_query function, specifically within the H5Lexternal.c file. This issue could potentially enable unauthorized access to sensitive data, impacting the confidentiality and integrity of the information processed through this library. Users of affected versions are advised to review their implementations and apply necessary security measures to mitigate potential risks.

References

https://github.com/TeamSeri0us/pocs/tree/master/hdf5/h5stat
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.