Bug 918623 (CVE-2020-18232, CVE-2020-18494)

Summary:	sci-libs/hdf5: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	ajak, sci
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B2 [upstream]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-26 20:23:21 UTC

CVE-2020-18232 (https://github.com/winson2004aa/PAAFS/tree/master/vul2):

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

CVE-2020-18494 (https://github.com/magicSwordsMan/PAAFS/tree/master/vul12):

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

No links to reports upstream, wouldn't be surprised if these are complete bogus.

Comment 1 John Helmert III archtester

2024-07-10 03:18:59 UTC

Where are the fixes?