CVE-2019-8398

CVE-2019-8398 affects the HDF5 library version 1.10.4. The issue is an out-of-bounds read in H5T_get_size in H5T.c. The connected documents consistently report this vulnerability, with impact described as an out-of-bounds read; explicit exploitation details or in-the-wild status are not provided....

CVE-2019-8396

CVE-2019-8396 affects HDF5 up to 1.10.4, caused by a buffer overflow in H5O__layout_encode (H5Olayout.c) that can lead to a denial of service when parsing a crafted HDF5 file. Public advisories show remediation via upgrading to HDF5 1.10.11 (and related fixes in SUSE advisories), which addresses ...

CVE-2018-17434

A SIGFPE signal is raised in the function applyfilters of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

CVE-2018-17438

A SIGFPE signal is raised in the function H5Dselectio of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

Heap overflow

A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file...

CVE-2018-17434

A SIGFPE signal is raised in the function applyfilters of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

CVE-2018-17436

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

CVE-2018-17437

Memory leak in the H5Odtypedecodehelper function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service memory consumption via a crafted HDF5 file...

CVE-2018-17433

A heap-based buffer overflow in ReadGifImageDesc in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

Design/Logic Flaw

Memory leak in the H5Odtypedecodehelper function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service memory consumption via a crafted HDF5 file...

Design/Logic Flaw

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

UBUNTU-CVE-2018-17438

A SIGFPE signal is raised in the function H5Dselectio of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

DEBIAN-CVE-2018-17435

A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file...

UBUNTU-CVE-2018-17432

A NULL pointer dereference in H5Osdspaceencode in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file...

CVE-2018-17436

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

CVE-2018-17436

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

CVE-2018-17438

CVE-2018-17438 affects the HDF5 library (H5D__select_io in H5Dselect.c) and can raise a SIGFPE (division-by-zero) during parsing of a crafted HDF file, enabling a remote denial of service. The vulnerability exists in HDF5 versions up to 1.10.3. SUSE advisories SUSE-SU-2022:1912-1 and SUSE-SU-2022...

CVE-2018-17439

CVE-2018-17439 : A stack-based buffer overflow in the HDF5 1.10.3 library affects the H5S_extent_get_dims() function in H5S.c, triggered when converting an HDF5 file to a GIF. This issue, observed in the HDF5 1.10.3 stack, could lead to memory corruption and is documented in Nessus/SUSE advisorie...

CVE-2018-17432

A NULL pointer dereference in H5Osdspaceencode in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file...

CVE-2018-17432

CVE-2018-17432: In HDF5 up to v1.10.3, a NULL pointer dereference in H5O_sdspace_encode() (H5Osdspace.c) can cause a denial of service when processing a crafted HDF5 file. The entry references a fixed issue in SUSE advisories (HDF5 updates) and notes a NULL pointer dereference vulnerability; no e...