PT-2024-6188

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T conv struct opt function in the H5Tconv.c file of the HDF5 Library. This could potentially allow a remote attacker to impact the...

PT-2024-6207 · Unknown +4 · Hdf5 Library +4

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to a corrupted instruction pointer due to a SEGV in the H5T close real function in the H5T.c file. This is caused by a buffer overflow in memory, which can lead to a...

PT-2024-6198 · Unknown +4 · Hdf5 Library +4

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to a heap-based buffer overflow in the H5T copy reopen function in the H5T.c file of the HDF5 Library. This overflow can result in the corruption of the instruction...

PT-2024-6197 · Unknown +4 · Hdf5 Library +4

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap-based buffer over-read in the H5F addr decode len function in the H5Fint.c file of the HDF5 library. This can cause corruption of the instruction pointer. The...

PT-2024-40739 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

PT-2024-40684 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A crash issue was identified, characterized as an UNKNOWN READ. The crash state involves functions such as H5HG read, H5VL native blob get, and H5VL blob get. Recommendations: At the moment,...

CVE-2021-37501 affecting package hdf5 for versions less than 1.12.1-13

CVE-2021-37501 affecting package hdf5 for versions less than 1.12.1-13. A patched version of the package is available...

SUSE-SU-2024:0882-1 Security update for hdf5

This update for hdf5 fixes the following issues: Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a malformed file could result in chunk index memory leaks. Fixed a file space allocation bug in the parallel library for...

SUSE SLES15: hdf5-gnu-hpc / hdf5-gnu-hpc-devel / hdf5-gnu-mpich-hpc / etc (SUSE-SU-2024:0538-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0538-1 advisory. Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a...

SUSE-SU-2024:0538-1 Security update for hdf5

This update for hdf5 fixes the following issues: Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a malformed file could result in chunk index memory leaks. Fixed a file space allocation bug in the parallel library for...

OESA-2023-1989 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

OESA-2023-1988 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

PT-2023-35625 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified, which can cause a crash. The crash occurs in the H5T bit copy, H5T bit get d, and H5T conv f f functions. Recommendations: At the moment,...

The vulnerability of the H5O__chunk_deserialize() function in the H5Ocache.c component of the HDF file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Ochunkdeserialize function in the H5Ocache.c component, a library for processing HDF5 files, is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service interruptions by usi...

PT-2023-35553 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5F addr decode, H5O shared decode, and H5O fill new shared decode functions. No information ...

PT-2023-35549 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. Technical details about the crash include the involveme...

CVE-2021-37501 affecting package hdf5 for versions less than 1.12.1-13

CVE-2021-37501 affecting package hdf5 for versions less than 1.12.1-13. A patched version of the package is available...

PT-2023-35541 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5MM xstrdup, H5G ent to link, and H5G node iterate. Recommendations: At t...

PT-2023-35537 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs in the H5D scatter mem function, and is related to the H5D scatgath read and H5D contig read...

Ubuntu 16.04 ESM / 18.04 ESM : HDF5 vulnerabilities (USN-4817-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4817-1 advisory. It was discovered that HDF5 incorrectly handled certain hdf5 files. An attacker could possibly use this issue to cause a denial of service...