CVE-2018-11206

An out of bounds read was discovered in H5Ofillnewdecode and H5Ofillolddecode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

CVE-2018-11203

A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

CVE-2018-11204

A NULL pointer dereference was discovered in H5Ochunkdeserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

CVE-2018-11205

A out of bounds read was discovered in H5VMmemcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

CVE-2018-11202

CVE-2018-11202 affects HDF5 1.10.2 where a NULL pointer dereference in H5S_hyper_make_spans (H5Shyper.c) can lead to remote denial of service. The issue is addressed in later HDF5 updates; SUSE SUSE-SU-2024:3144-1 notes fixes for CVE-2018-11202 when upgrading hdf5 to 1.10.11. If you rely on affec...

CVE-2018-11207

CVE-2018-11207 affects HDF5 (HDF5 1.10.2) with a division-by-zero in H5D__chunk_init (H5Dchunk.c) that could allow a remote denial-of-service. Connected advisories note this is fixed in later HDF5/SUSE patches (e.g., 1.10.5 and related security updates). Affected products include HDF5 1.10.x, wit...

PT-2018-10392 · Hdf +1 · Hdf5 +1

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.2 Description: A NULL pointer dereference was discovered in the H5S hyper make spans function in H5Shyper.c. This issue could allow a remote denial of service attack. Recommendations: For version 1.10.2, consider updating to...

CVE-2018-11206

CVE-2018-11206 is an out-of-bounds read in HDF5 1.10.2 (H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c) that could enable remote denial of service or information disclosure. Public docs confirm the vulnerability and indicate fixed releases across distributions: Debian notes a fix in 1.1...

DEBIAN-CVE-2017-17507

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Tconvstructopt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

UBUNTU-CVE-2017-17506

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

UBUNTU-CVE-2017-17508

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5Tsetloc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

UBUNTU-CVE-2017-17505

In HDF5 1.10.1, there is a NULL pointer dereference in the function H5Oplinedecode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...