High severity8.6NVD Advisory· Published Nov 18, 2016· Updated Jun 17, 2026
CVE-2016-4332
CVE-2016-4332
Description
The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
45- osv-coords43 versionspkg:rpm/opensuse/hdf5_1_10_11-gnu-hpc&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/hdf5_1_10_11-gnu-mpich-hpc&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/hdf5_1_10_11-gnu-mvapich2-hpc&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/hdf5_1_10_11-gnu-openmpi3-hpc&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/hdf5_1_10_11-gnu-openmpi4-hpc&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/adios_1_13_1-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/adios_1_13_1-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/adios_1_13_1-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/adios_1_13_1-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/hdf5_1_10_11-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/hdf5_1_10_11-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/hdf5_1_10_11-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/hdf5_1_10_11-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/hdf5_1_10_11-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/hdf5_1_10_11-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-openmpi1-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012pkg:rpm/suse/hdf5_1_10_11-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/hdf5_1_10_11-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/hdf5_1_10_11-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP5pkg:rpm/suse/hdf5_1_10_11-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/hdf5&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/netcdf_4_7_4-gnu-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/netcdf_4_7_4-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/netcdf_4_7_4-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/netcdf_4_7_4-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/netcdf_4_7_4-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/petsc_3_14_5-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/petsc_3_14_5-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/petsc_3_14_5-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/petsc_3_14_5-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/petsc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/trilinos_13_2_0-gnu-mpich-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/trilinos_13_2_0-gnu-mvapich2-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/trilinos_13_2_0-gnu-openmpi3-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/trilinos_13_2_0-gnu-openmpi4-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/trilinos_13_2_0-hpc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS
< 1.10.11-150400.3.12.1+ 42 more
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.13.1-150300.12.4.2
- (no CPE)range: < 1.13.1-150300.12.4.2
- (no CPE)range: < 1.13.1-150300.12.4.2
- (no CPE)range: < 1.13.1-150300.12.4.2
- (no CPE)range: < 1.10.11-150300.4.16.15
- (no CPE)range: < 1.10.11-3.21.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150300.4.16.15
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150300.4.16.15
- (no CPE)range: < 1.10.11-3.21.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-3.21.1
- (no CPE)range: < 1.10.11-150300.4.16.15
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150300.4.16.15
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.10.11-150400.3.12.1
- (no CPE)range: < 1.8.17-5.1
- (no CPE)range: < 4.7.4-150300.4.7.19
- (no CPE)range: < 4.7.4-150300.4.7.19
- (no CPE)range: < 4.7.4-150300.4.7.20
- (no CPE)range: < 4.7.4-150300.4.7.17
- (no CPE)range: < 4.7.4-150300.4.7.21
- (no CPE)range: < 3.14.5-150300.3.4.4
- (no CPE)range: < 3.14.5-150300.3.4.4
- (no CPE)range: < 3.14.5-150300.3.4.4
- (no CPE)range: < 3.14.5-150300.3.4.4
- (no CPE)range: < 3.14.5-150300.3.4.3
- (no CPE)range: < 13.2.0-150300.3.12.18
- (no CPE)range: < 13.2.0-150300.3.12.18
- (no CPE)range: < 13.2.0-150300.3.12.16
- (no CPE)range: < 13.2.0-150300.3.12.18
- (no CPE)range: < 13.2.0-150300.3.12.9
Patches
Vulnerability mechanics
References
4- www.talosintelligence.com/reports/TALOS-2016-0178/nvdExploitTechnical DescriptionThird Party Advisory
- www.debian.org/security/2016/dsa-3727nvd
- www.securityfocus.com/bid/94417nvd
- security.gentoo.org/glsa/201701-13nvd
News mentions
0No linked articles in our index yet.