CVE-2020-10811

Published: 3/22/2020 Last updated: 8/4/2024 Reserved: 3/22/2020

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

hdf5

Products affected (1)

Product	Vendor	Version
n/a	n/a	< 18e8cbbae79cb35bdce8a01c889827b9799c762e

References (12)

https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt
https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0/
https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2
https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt
https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0/
https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt
https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0/
https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2
https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt
https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0/
https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2
https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2