CVE-2024-29158

2024-05-1415:15:31

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-29158

hdf5

stack buffer overflow

denial of service

potential code execution

unix

8.1 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

OSVersionArchitecturePackageVersionFilename
Debian12allhdf5<= 1.10.8+repack1-1hdf5_1.10.8+repack1-1_all.deb
Debian11allhdf5<= 1.10.6+repack-4+deb11u1hdf5_1.10.6+repack-4+deb11u1_all.deb
Debian10allhdf5<= 1.10.4+repack-10hdf5_1.10.4+repack-10_all.deb
Debian999allhdf5<= 1.10.10+repack-3.3hdf5_1.10.10+repack-3.3_all.deb
Debian13allhdf5<= 1.10.10+repack-3.3hdf5_1.10.10+repack-3.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	hdf5	<= 1.10.8+repack1-1	hdf5_1.10.8+repack1-1_all.deb
Debian	11	all	hdf5	<= 1.10.6+repack-4+deb11u1	hdf5_1.10.6+repack-4+deb11u1_all.deb
Debian	10	all	hdf5	<= 1.10.4+repack-10	hdf5_1.10.4+repack-10_all.deb
Debian	999	all	hdf5	<= 1.10.10+repack-3.3	hdf5_1.10.10+repack-3.3_all.deb
Debian	13	all	hdf5	<= 1.10.10+repack-3.3	hdf5_1.10.10+repack-3.3_all.deb