Multiple heap-based buffer overflows in CDF might result in the execution
of arbitrary code.


Background


CDF is a library for the Common Data Format which is a self-describing
data format for the storage and manipulation of scalar and
multidimensional data. It is developed by the NASA.


Affected Packages

Package: sci-libs/cdf
Vulnerable: < 3.3.0
Unaffected: >= 3.3.0
Architectures: All supported architectures