Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2016-4332 | First vendor Publication | 2016-11-18 |
| Vendor | Cve | Last vendor Modification | 2017-11-04 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 8.6 | ||
| Base Score | 8.6 | Environmental Score | 8.6 |
| impact SubScore | 6 | Temporal Score | 8.6 |
| Exploitabality Sub Score | 1.8 | ||
| Attack Vector | Local | Attack Complexity | Low |
| Privileges Required | None | User Interaction | Required |
| Scope | Changed | Confidentiality Impact | High |
| Integrity Impact | High | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 6.9 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 3.4 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4332 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2016-11-17 | HDF5 new object modification time out of bounds write attempt RuleID : 40810 - Revision : 3 - Type : FILE-OTHER |
| 2016-11-17 | HDF5 new object modification time out of bounds write attempt RuleID : 40809 - Revision : 3 - Type : FILE-OTHER |
| 2016-11-17 | HDF5 symbol table message out of bounds write attempt RuleID : 40808 - Revision : 3 - Type : FILE-OTHER |
| 2016-11-17 | HDF5 symbol table message out of bounds write attempt RuleID : 40807 - Revision : 3 - Type : FILE-OTHER |
| 2016-11-17 | HDF5 object modification time out of bounds write attempt RuleID : 40806 - Revision : 3 - Type : FILE-OTHER |
| 2016-11-17 | HDF5 object modification time out of bounds write attempt RuleID : 40805 - Revision : 3 - Type : FILE-OTHER |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2017-01-10 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_91e039edd68911e6917114dae9d210b8.nasl - Type : ACT_GATHER_INFO |
| 2017-01-03 | Name : The remote Debian host is missing a security update. File : debian_DLA-771.nasl - Type : ACT_GATHER_INFO |
| 2017-01-03 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201701-13.nasl - Type : ACT_GATHER_INFO |
| 2016-12-28 | Name : The remote Fedora host is missing a security update. File : fedora_2016-3477b592e3.nasl - Type : ACT_GATHER_INFO |
| 2016-12-01 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3727.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:48:54 |
|
| 2021-04-22 02:00:21 |
|
| 2020-05-23 00:51:12 |
|
| 2017-11-04 09:23:43 |
|
| 2017-07-01 09:23:27 |
|
| 2017-01-11 13:25:28 |
|
| 2017-01-04 13:23:10 |
|
| 2016-12-29 13:20:14 |
|
| 2016-12-02 13:24:58 |
|
| 2016-11-29 00:26:14 |
|
| 2016-11-22 09:23:01 |
|
| 2016-11-19 00:24:08 |
|
