Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-17237
HistorySep 20, 2018 - 6:29 a.m.

CVE-2018-17237

2018-09-2006:29:00
CWE-369
[email protected]
web.nvd.nist.gov
36
sigfpe
h5d__chunk_set_info_real
h5dchunk.c
hdf hdf5
1.10.3
nvd
cve-2018-17237
information security
vulnerability
division by zero
parse
crafted file

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

43.7%

JSON

A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.

CPENameOperatorVersion
hdfgroup:hdf5hdfgroup hdf5le1.10.3

Related

ubuntucve 2
redhatcve 3
osv 4
cvelist 2
prion 2
debiancve 2
nessus 8
ubuntu 1
openvas 4
cve 2
debian 1
suse 1
ubuntucve
ubuntucve
CVE-2018-17237
2018-09-20 00:00:00
CVE-2018-11207
2018-05-16 00:00:00
redhatcve
redhatcve
CVE-2018-17237
2020-04-09 11:08:30
CVE-2018-11207
2018-05-18 20:25:15
CVE-2018-15672
2018-08-23 06:49:58
osv
osv
CVE-2018-17237
2018-09-20 06:29:00
hdf5 vulnerabilities
2022-07-20 14:48:32
CVE-2018-11207
2018-05-16 15:29:00
cvelist
cvelist
CVE-2018-17237
2018-09-20 00:00:00
CVE-2018-11207
2018-05-16 15:00:00
prion
prion
Design/Logic Flaw
2018-09-20 06:29:00
Design/Logic Flaw
2018-05-16 15:29:00
debiancve
debiancve
CVE-2018-17237
2018-09-20 06:29:00
CVE-2018-11207
2018-05-16 15:29:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : HDF5 vulnerabilities (USN-5272-1)
2023-10-16 00:00:00
Debian DLA-3522-1 : hdf5 - LTS security update
2023-08-09 00:00:00
SUSE SLES15 Security Update : hdf5 (SUSE-SU-2022:1912-1)
2022-06-03 00:00:00
ubuntu
ubuntu
HDF5 vulnerabilities
2022-07-20 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5272-1)
2023-01-27 00:00:00
Debian: Security Advisory (DLA-3522-1)
2023-08-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1912-1)
2022-06-02 00:00:00
cve
cve
CVE-2018-11207
2018-05-16 15:29:00
CVE-2018-15672
2018-08-21 23:29:00
debian
debian
[SECURITY] [DLA 3522-1] hdf5 security update
2023-08-09 06:27:53
suse
suse
Security update for hdf5 (important)
2022-06-02 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

43.7%

JSON
Related for CVE-2018-17237
ubuntucve2redhatcve3osv4cvelist2prion2debiancve2nessus8ubuntu1openvas4cve2debian1suse1