The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.

This update for hdf5 fixes the following issues :

  - fix security issues (arbitary code execution):
    CVE-2016-4330: H5T_ARRAY Code Execution (boo#1011201)     CVE-2016-4331: H5Z_NBIT Code Execution (boo#1011204)     CVE-2016-4332: Shareable Message Type Code Execution     (boo#1011205) CVE-2016-4333: Array index bounds issue     (boo#1011198)

Talos Security reports :

- CVE-2016-4330 (TALOS-2016-0176) - HDF5 Group libhdf5 H5T_ARRAY Code Execution Vulnerability

- CVE-2016-4331 (TALOS-2016-0177) - HDF5 Group libhdf5 H5Z_NBIT Code Execution Vulnerability

- CVE-2016-4332 (TALOS-2016-0178) - HDF5 Group libhdf5 Shareable Message Type Code Execution Vulnerability

- CVE-2016-4333 (TALOS-2016-0179) - HDF5 Group libhdf5 H5T_COMPOUND Code Execution Vulnerability

The remote host is affected by the vulnerability described in GLSA-201701-13 (HDF5: Multiple vulnerabilities)

    Multiple arbitrary code execution vulnerabilities have been discovered       in HDF5. Please review the CVE identifiers referenced below for details.
  Impact :

    An attacker could execute arbitrary code with the privileges of the       process via a maliciously crafted database file.
  Workaround :

    There is no known workaround at this time.

Cisco Talos discovered that hdf5, a file format and library for storing scientific data, contained several vulnerabilities that could lead to arbitrary code execution when handling untrusted data.

For Debian 7 'Wheezy', these problems have been fixed in version 1.8.8-9+deb7u1.

We recommend that you upgrade your hdf5 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2016-4330, CVE-2016-4331, CVE-2016-4332, CVE-2016-4333

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Cisco Talos discovered that hdf5, a file format and library for storing scientific data, contained several vulnerabilities that could lead to arbitrary code execution when handling untrusted data.

ID	Name	Product	Family	Severity
109296	openSUSE Security Update : hdf5 (openSUSE-2018-392)	Nessus	SuSE Local Security Checks	high
96369	FreeBSD : hdf5 -- multiple vulnerabilities (91e039ed-d689-11e6-9171-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	high
96244	GLSA-201701-13 : HDF5: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
96187	Debian DLA-771-1 : hdf5 security update	Nessus	Debian Local Security Checks	high
96157	Fedora 25 : hdf5 (2016-3477b592e3)	Nessus	Fedora Local Security Checks	high
95414	Debian DSA-3727-1 : hdf5 - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-4333

high

Tenable Plugins

high

high

high

high

high

high