CVE-2024-32617

The CVE-2024-32617 entry is supported by connected documentation: HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by unsafe use of strdup in H5MM_xstrdup (H5MM.c), called from H5G__ent_to_link (H5Glink.c). This affects HDF5 1.14.3 and can lead to memory corruption. The r...

CVE-2024-32616

HDF5 Library prior to 1.14.4 is affected by a heap-based buffer over-read in H5O__dtype_encode_helper (H5Odtype.c) for CVE-2024-32616. Affected product: HDF5 Library (version 1.14.3 and earlier). Root cause: heap-based over-read in dtype encoding helper. Impact in the public description is limite...

CVE-2024-32614

CVE-2024-32614 affects HDF5 Library up to 1.14.3, causing a SEGV in H5VM_memcpyvv (H5VM.c). Impact is a crash; no exploit details are provided in the documents beyond the segfault description. Affected product: HDF5 Library v1.14.x prior to 1.14.4. Remediation: upgrade to 1.14.4 as fixed by the H...

CVE-2024-34209

TOTOLINK CP450, version 4.1.0cu.747_B20191224, contains a stack buffer overflow in the setIpPortFilterRules function. The root cause is improper input length/size validation in that function, enabling potential overflow. Documented impacts include arbitrary code execution or denial of service, wi...

CVE-2024-32612

CVE-2024-32612 (and related CVE-2024-32613) affect HDF5 Library

CVE-2024-34202

CVE-2024-34202 affects TOTOLINK CP450, specifically version 4.1.0cu.747_B20191224, which contains a stack buffer overflow in the setMacFilterRules function. The vulnerability is described as a stack overflow in input length validation that can be exploited remotely, with indications of possible a...

CVE-2024-27395

The CVE-2024-27395 issue is in the Linux kernel: net/openvswitch: Use-After-Free in ovs_ct_exit due to kfree_rcu being invoked outside the RCU read lock during ovs_ct_limit_exit traversal, creating a window where the freed key may be accessed after the grace period. The published fix changes the ...

CVE-2023-52654

The CVE-2023-52654 entry concerns the Linux kernel io_uring/af_unix component. The issue arises from file reference cycles when io_uring files are sent via sockets, which can race with unix_stream_read_generic(). The safe fix implemented is to disallow sending io_uring files over sockets via SCM_...

CVE-2024-34203

CVE-2024-34203 affects TOTOLINK CP450; a stack buffer overflow in the setLanguageCfg function of version 4.1.0cu.747_B20191224. Publicly documented impacts indicate network-remote overflow with potential denial of service; confidentiality remains unchanged, integrity is Low, availability Low. Exp...

CVE-2024-34205

CVE-2024-34205 affects TOTOLINK CP450, specifically version 4.1.0cu.747_B20191224, which has a command injection vulnerability in the download_firmware function. The issue is attributed to improper handling/filtering of commands in the firmware download path, enabling command execution with netwo...

CVE-2024-32610

Summary (CVE-2024-32610): HDF5 Library versions up to 1.14.3 are affected. A SEGV in H5T_close_real (H5T.c) can corrupt the instruction pointer, risking crash or potential code execution as described in advisories. Remediation: upgrade to HDF5 1.14.4 or newer (per linked vendor update). Note: exp...

CVE-2024-32609

CVE-2024-32609 affects the HDF5 Library up to version 1.14.3. The vulnerability is a stack consumption issue in H5E_printf_stack (H5Eint.c). Per the CVSS data, it has a high impact (Base score 7.5, CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) with network attack vector and no confidentiality/in...

CVE-2024-32607

CVE-2024-32607 affects HDF5 Library up to 1.14.3. A SEGV in H5A__close (H5Aint.c) can corrupt the instruction pointer, per multiple vendor advisories. Impact is local, with potential denial of service or code execution as implied by prior CVEs in the same family; explicit exploitation status is n...

CVE-2024-32605

HDF5 Library up to version 1.14.3 is affected by CVE-2024-32605 due to a heap-based buffer over-read in H5VM_memcpyvv (H5VM.c), invoked from H5D__compact_readvv (H5Dcompact.c). This memory-read overrun could lead to memory corruption or a crash. The issue is fixed in 1.14.4; upgrading is recommen...

CVE-2024-34207

CVE-2024-34207 affects TOTOLINK CP450 firmware v4.1.0cu.747_B20191224. A stack buffer overflow in the setStaticDhcpConfig function is reported, enabling potential arbitrary code execution or denial of service. Multiple sources describe the condition and impacted device; Red Hat/CNNVD/NVD entries ...

CVE-2024-29166

CVE-2024-29166 affects HDF5 up to 1.14.3, where a buffer overflow in H5O__linfo_decode can corrupt the instruction pointer, enabling denial of service or potential code execution. A fix is available in HDF5 1.14.4 (per the referenced HDF5 security advisory). Affected products/versions are evidenc...

CVE-2024-29164

CVE-2024-29164 affects HDF5 up to version 1.14.3, where a stack buffer overflow in the decoder path H5R__decode_heap can corrupt the instruction pointer, enabling denial of service or potential code execution. The vulnerability is tied to HDF5 1.14.x releases and can be mitigated by upgrading to ...

CVE-2024-29163

CVE-2024-29163: HDF5 (1.14.3 and earlier) has a heap-based overflow in H5T__bit_find that can corrupt the instruction pointer, enabling denial of service or potential code execution. Upgrading to HDF5 1.14.4 (or later) is the documented remediation. Affects HDF5 components as described in the con...

CVE-2024-34215

TOTOLINK CP450 v4.1.0cu.747_B20191224 contains a stack buffer overflow in the setUrlFilterRules function. Multiple sources (CVE entry and CNVD/CNNVD/CVELIST/NVD records) describe this vulnerability as a stack buffer overflow caused by improper validation of input data length in setUrlFilterRules,...

CVE-2024-29162

HDF5 vulnerability CVE-2024-29162 is a stack buffer overflow in H5HG_read, affecting HDF5 up to 1.13.3 and/or 1.14.2, leading to denial of service or potential code execution. Affected component: H5HG_read in HDF5; root cause: stack buffer overflow; impact: DoS or possible code execution; remedia...