SB2016120106 - Debian update for hdf5

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2016-4330)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to the library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it. A local attacker can trigger heap-based buffer overflow and execute arbitrary code with root privileges on the target system.

Successful exploitation of the vulnerability may result in system compromise.

2) Heap-based buffer overflow (CVE-ID: CVE-2016-4331)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to library's failure to ensure that the precision is within the bounds of the size when decoding data out of a dataset encoded with the H5Z_NBIT decoding. A local attacker can trigger heap-based buffer overflow and execute arbitrary code with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

3) Heap-based buffer overflow (CVE-ID: CVE-2016-4332)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to library's failure to check if certain message types support a particular flag and the library can cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library can write outside the bounds of the heap buffer. A local attacker can trigger heap-based buffer overflow and execute arbitrary code with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

4) Heap-based buffer overflow (CVE-ID: CVE-2016-4333)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to the library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. A local attacker can cause the loop's index to point outside the bounds of the array when initializing it, trigger heap-based buffer overflow and execute arbitrary code with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

Remediation

Install update from vendor's website.

References

• https://www.talosintelligence.com/reports/TALOS-2016-0176/
• https://www.talosintelligence.com/reports/TALOS-2016-0177/
• https://www.talosintelligence.com/reports/TALOS-2016-0178/
• https://www.talosintelligence.com/reports/TALOS-2016-0179/