CVE-2020-18232: Buffer Overflow
Published Aug 22, 2023
·Updated
Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
Affected Software
1 affected component
HDFGroup hdf5=1.10.4
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-18232?
CVE-2020-18232 is considered critical due to its potential to allow remote code execution.
2
How do I fix CVE-2020-18232?
To resolve CVE-2020-18232, upgrade HDF5 to a version later than 1.10.4 that addresses the buffer overflow vulnerability.
3
What software is affected by CVE-2020-18232?
CVE-2020-18232 specifically affects HDF5 version 1.10.4.
4
What type of vulnerability is CVE-2020-18232?
CVE-2020-18232 is a buffer overflow vulnerability found in the H5S_close function.
5
What can attackers do with CVE-2020-18232?
Attackers can exploit CVE-2020-18232 to execute arbitrary code by creating a specially crafted HDF5 file.