CVE-2016-4333

High

Description

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.

SeverityHigh

CVSS8.6

Exploit probability50. percentile0.6%

ProductHdfgroup Hdf5

PublishedNov 18, 2016

First seenNov 18, 2016

How to fix

Vendor advisories

security.gentoo.org/glsa/201701-13

Affected products

Product	Affected versions	Fixed in
hdfgroup hdf5	1.8.16	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.