3 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-17509
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5Gentdecodevec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or...
SUSE SLES12 Security Update : hdf5, suse-hpc (SUSE-SU-2022:1933-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1933-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c...
CVE-2017-17509
CVE-2017-17509 is an out-of-bounds write vulnerability in HDF5 1.10.1 affecting the H5G__ent_decode_vec path in H5Gcache.c within libhdf5.a. The initial description notes that a crafted HDF5 file could cause h5dump to crash and potentially other unspecified effects. Public connected documents ind...