PT-2021-7728
CVE-2021-37501
·
تاريخ النشر
2021-07-22
·
تاريخ التحديث
2026-08-25
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
HDF5 versions 1.12.0 through 1.13.0
Description
The issue is related to a buffer overflow in the
h5tools str sprint function, located in /hdf5/tools/lib/h5tools str.c, which can cause a denial of service. This can be exploited by a remote attacker.Recommendations
For versions 1.12.0 through 1.13.0, consider disabling the
h5tools str sprint function as a temporary workaround until a patch is available. Restrict access to the h5dump tool to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾