Fedora 25 : hdf5 (2016-3477b592e3)

Security fix for CVE-2016-4330, CVE-2016-4331, CVE-2016-4332, CVE-2016-4333 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for hdf5 FEDORA-2016-3477b592e3

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 3727-1 (hdf5 - security update)

Cisco Talos discovered that hdf5, a file format and library for storing scientific data, contained several vulnerabilities that could lead to arbitrary code execution when handling untrusted data. OpenVAS Vulnerability Test $Id: deb3727.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated fro...

[SECURITY] [DSA 3727-1] hdf5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3727-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3727-1] hdf5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3727-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 30, 2016 https://www.debian.org/security/faq -...

CVE-2016-4330

Multiple heap overflows were found in HDF5. These issues could be used to gain code execution in any program that exposes the affected functions to untrusted input. While HDF5 is shipped as a dependency, no Red Hat products are known to expose these issues in any supported use case at this time...

CVE-2016-4330

In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution...

CVE-2016-4330

CVE-2016-4330 affects the HDF5 library (1.8.16 in the description) where failure to validate the number of array dimensions leads to a heap-based buffer overflow and potential arbitrary code execution. Connected advisories confirm multiple related CVEs (CVE-2016-4330/4331/4332/4333) and document ...

CVE-2016-4330

In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution...

HDF5 Group libhdf5 H5T_ARRAY Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0176 HDF5 Group libhdf5 H5TARRAY Code Execution Vulnerability November 17, 2016 CVE Number CVE-2016-4330 Description HDF5 is a fileformat that is maintained by a non-profit organization, The HDF Group. HDF5 is designed to be used for storage and organization ...

USN-2916-1 Perl vulnerabilities | Cloud Foundry

USN-2916-1 Perl vulnerabilities Medium Vendor Ubuntu, Perl Versions Affected Ubuntu 14.04 LTS Description Several security issues were fixed in Perl. It was discovered that Perl incorrectly handled certain regular expressions with an invalid back-reference. An attacker could use this issue to cau...

Ubuntu 14.04 LTS : Perl vulnerabilities (USN-2916-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2916-1 advisory. It was discovered that Perl incorrectly handled certain regular expressions with an invalid backreference. An attacker could use this issue to cause Perl...

CVE-2015-4330

Cisco TelePresence Video Communication Server Expressway X8.5.2 contains a local file script vulnerability that lets an authenticated, local attacker gain elevated OS-command execution by supplying invalid parameters to a local script. Root cause is insufficient protection of the local script, en...

Perl Denial of Service Vulnerability (Jan 2015) - Windows

Active Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:perl:perl";...

Oracle Solaris Third-Party Patch Update : perl (cve_2014_4330_buffer_errors)

The remote Solaris system is missing necessary patches to address security updates : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many...

SuSE 11.3 Security Update : perl (SAT Patch Number 9858)

This update fixes a memory leak and an infinite recursion in Data::Dumper. CVE-2014-4330 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SUSE-RU-2015:0562-1 Security update for perl

This update fixes a memory leak and an infinite recursion in Data::Dumper. CVE-2014-4330 Security Issues: CVE-2014-4330...

Mandriva Linux Security Advisory : perl (MDVSA-2014:199)

Updated perl and perl-Data-Dumper packages fixes security vulnerability : The Dumper method in Data::Dumper before 2.154, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which triggers a large...

Updated perl packages fix CVE-2014-4330

Updated perl package fixes security vulnerability: The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which trigge...

Updated perl-Data-Dumper package fixes CVE-2014-4330

Updated perl-Data-Dumper package fixes security vulnerability: The Dumper method in Data::Dumper before 2.154, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which triggers a large number of...