CVE details
CVE-2020-10809
An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.
Affected ports (2)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| science/hdf5-110 | hdf5-110 | 1.10.11 | possibly backported | sunpoet@FreeBSD.org |
| science/hdf5-18 | hdf5-18 | 1.8.23 | possibly backported | thierry@FreeBSD.org |