Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-29166

HistoryMay 14, 2024 - 3:15 p.m.

CVE-2024-29166

2024-05-1415:15:33

Debian Security Bug Tracker

security-tracker.debian.org

hdf5 buffer overflow

h5o__linfo_decode

instruction pointer corruption

denial of service

potential code execution

unix

8.2 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

OSVersionArchitecturePackageVersionFilename
Debian12allhdf5<= 1.10.8+repack1-1hdf5_1.10.8+repack1-1_all.deb
Debian11allhdf5<= 1.10.6+repack-4+deb11u1hdf5_1.10.6+repack-4+deb11u1_all.deb
Debian999allhdf5<= 1.10.10+repack-3.3hdf5_1.10.10+repack-3.3_all.deb
Debian13allhdf5<= 1.10.10+repack-3.3hdf5_1.10.10+repack-3.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	hdf5	<= 1.10.8+repack1-1	hdf5_1.10.8+repack1-1_all.deb
Debian	11	all	hdf5	<= 1.10.6+repack-4+deb11u1	hdf5_1.10.6+repack-4+deb11u1_all.deb
Debian	999	all	hdf5	<= 1.10.10+repack-3.3	hdf5_1.10.10+repack-3.3_all.deb
Debian	13	all	hdf5	<= 1.10.10+repack-3.3	hdf5_1.10.10+repack-3.3_all.deb