NVD

Id
20016  
Name
CVE-2016-4332  
Description
The library"s failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren"t supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-11-18  
Modified Date
2016-11-28  
Seq
2016-4332  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109302 20016 CVE-2016-4332 94417  View
109303 20016 CVE-2016-4332 http://www.talosintelligence.com/reports/TALOS-2016-0178/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5145 JVNDB-2016-005918 HDF5 のライブラリにおけるコンテキスト配下で任意のコードを実行される脆弱性 HDF5 のライブラリには、コンテキスト配下で任意のコードを実行される脆弱性が存在します。 CVE-2016-4332 90838 CVE-2016-4332 20016 6.9 8.6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005918.html 2016-11-15 2016-11-24 View