Logo
›
›vulnerability›CVE-2018-17433
Name
CVE-2018-17433
Source
NVD ( link)Debian ( link)
Description
A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
CWEs
CWE-787
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#heap-overflow-in-readgifimagedescExploit
https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#heap-overflow-in-readgifimagedescExploit

Analysis#

Affected Component
Analysis
hdf5
Exploitable

Vulnerability Ratings#

6.5
other
4.3
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
hdf5
yocto
master
2.0.0
Not Affected
hdf5
yocto
scarthgap
1.14.4-3
Not Affected