CVE-2020-18494: Buffer Overflow
Published Aug 22, 2023
·Updated
Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
Affected Software
1 affected component
HDFGroup hdf5=1.10.4
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-18494?
CVE-2020-18494 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2020-18494?
To fix CVE-2020-18494, upgrade to HDF5 version 1.10.5 or later, where the vulnerability has been addressed.
3
What software is affected by CVE-2020-18494?
CVE-2020-18494 affects HDF5 version 1.10.4 specifically.
4
What type of vulnerability is CVE-2020-18494?
CVE-2020-18494 is a buffer overflow vulnerability.
5
Can CVE-2020-18494 be exploited remotely?
Yes, CVE-2020-18494 can be exploited by remote attackers through crafted files.