CVE-2020-18494

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-18494

CVE-2020-18494 describes a buffer overflow in the HDF5 1.10.4 library, specifically in function H5S_close (H5S.c). The vulnerability allows remote attackers to execute arbitrary code by supplying a crafted file. The connected sources consistently identify this as a high-severity issue with potent...

CVE-2020-18232

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-18232

CVE-2020-18232 describes a Buffer Overflow in the HDF5 project, specifically in function H5S_close of H5S.c, affecting HDF5 1.10.4. An attacker can exploit a crafted file to achieve remote arbitrary code execution. Multiple sources (NVD, OSV, RH) confirm the vulnerability’s impact as remote code ...

CVE-2020-18232

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2021-37501

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5toolsstrsprint in /hdf5/tools/lib/h5toolsstr.c...

Debian: Security Advisory (DLA-3522-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3522-1] hdf5 security update

Debian LTS Advisory DLA-3522-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 09, 2023 https://wiki.debian.org/LTS Package : hdf5 Version : 1.10.4+repack-10+deb10u1 CVE ID : CVE-2018-11206 CVE-2018-17233 CVE-2018-17234 CVE-2018-17237 CVE-2018-17434...

Debian dla-3522 : hdf5-helpers - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3522 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3522-1 [email protected]...

DLA-3522-1 hdf5 - security update

Bulletin has no description...

PT-2023-35848 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state includes functions such as H5MM xstrdup, H5G ent to link, and H5G stab lookup cb. Recommendations: At the moment, there i...

PT-2023-35825 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a crash caused by a negative-size-param, which occurs in the H5MM memcpy function, called by H5O link decode and H5O msg iterate real. Recommendations: At the moment,...

PT-2023-35812 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. Technical details about the issue include the involveme...

PT-2023-35809 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5FS sect link, H5FS sect add, and H5MF add sect. Recommendations: At the...

PT-2023-35805 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the H5MM memcpy function, which is called by H5O cache chk serialize and H5C generate image. Recommendations: At the...

SUSE SLES15: hdf5-gnu-hpc / hdf5-gnu-hpc-devel / hdf5-gnu-mpich-hpc / etc (SUSE-SU-2023:1563-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1563-1 advisory. - CVE-2021-37501: Fixed overflow in calculation of data buffer due to bogus input file bsc1207973. Tenable has extracted the preceding...

PT-2023-35724 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5G node cmp3, H5B find, and H5G stab lookup functions. Recommendations: At the moment, there...

SUSE SLED15: hdf5-gnu-hpc / hdf5-gnu-hpc-devel / hdf5-gnu-mpich-hpc / etc (SUSE-SU-2023:0777-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0777-1 advisory. - CVE-2021-37501: Fixed overflow in calculation of data buffer due to bogus input file bsc1207973. Tenable has extracte...

SUSE-SU-2023:0777-1 Security update for hdf5

This update for hdf5 fixes the following issues: - CVE-2021-37501: Fixed overflow in calculation of data buffer due to bogus input file bsc1207973...

SUSE SLES12 Security Update : hdf5, suse-hpc (SUSE-SU-2022:1933-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1933-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c...