CVE-2024-33873

2024-05-1415:38:09

Debian Security Bug Tracker

security-tracker.debian.org

hdf5 library

heap-based buffer overflow

cve-2024-33873

unix

7.5 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.

OSVersionArchitecturePackageVersionFilename
Debian12allhdf5<= 1.10.8+repack1-1hdf5_1.10.8+repack1-1_all.deb
Debian11allhdf5<= 1.10.6+repack-4+deb11u1hdf5_1.10.6+repack-4+deb11u1_all.deb
Debian10allhdf5<= 1.10.4+repack-10hdf5_1.10.4+repack-10_all.deb
Debian999allhdf5<= 1.10.10+repack-3.3hdf5_1.10.10+repack-3.3_all.deb
Debian13allhdf5<= 1.10.10+repack-3.3hdf5_1.10.10+repack-3.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	hdf5	<= 1.10.8+repack1-1	hdf5_1.10.8+repack1-1_all.deb
Debian	11	all	hdf5	<= 1.10.6+repack-4+deb11u1	hdf5_1.10.6+repack-4+deb11u1_all.deb
Debian	10	all	hdf5	<= 1.10.4+repack-10	hdf5_1.10.4+repack-10_all.deb
Debian	999	all	hdf5	<= 1.10.10+repack-3.3	hdf5_1.10.10+repack-3.3_all.deb
Debian	13	all	hdf5	<= 1.10.10+repack-3.3	hdf5_1.10.10+repack-3.3_all.deb