Vulnerability Details CVE-2018-11206
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.7%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.8
References
- https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md
- https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
- https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html
- https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md
- https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
- https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html