CVE-2016-4330

{"id": "CVE-2016-4330", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "published": "2016-11-18T20:59:00.317", "references": [{"url": "http://www.debian.org/security/2016/dsa-3727", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/94414", "source": "cret@cert.org"}, {"url": "http://www.talosintelligence.com/reports/TALOS-2016-0176/", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://security.gentoo.org/glsa/201701-13", "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution."}, {"lang": "es", "value": "En el fallo de la librer\u00eda HDF5 1.8.16 para comprobar el n\u00famero de dimensiones de una matriz le\u00edda del archivo est\u00e1 dentro de los l\u00edmites de espacio asignado para ello, se producir\u00e1 un desbordamiento de b\u00fafer basado en memoria din\u00e1mica, lo que podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo arbitrario."}], "lastModified": "2017-11-04T01:29:19.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hdfgroup:hdf5:1.8.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "917A1D77-B6E2-48F6-B9FF-04A1D1646529"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}