CVE-2018-13876

CVE-2018-13876 concerns the HDF5 1.8.20 library. The vulnerability is a stack-based buffer overflow in the function H5FD_sec2_read (H5FDsec2.c), related to HDread. Connected sources consistently describe this issue as part of HDF5 1.8.20, with no additional public details provided here about affe...

CVE-2018-13876

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FDsec2read in H5FDsec2.c, related to HDread...

CVE-2018-13868: Out-of-bounds Read

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Ofillolddecode in H5Ofill.c...

CVE-2018-13874: Out-of-bounds Write

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FDsec2read in H5FDsec2.c, related to HDmemset...

CVE-2018-13876: Out-of-bounds Write

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FDsec2read in H5FDsec2.c, related to HDread...

CVE-2018-11205

An out-of-bounds read flaw was discovered in H5VMmemcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. This could allow a remote denial of service or information disclosure attack...

CVE-2018-11203

A division by zero flaw was found in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. This could allow a remote denial of service attack...

CVE-2018-11207

A division by zero was discovered in H5Dchunkinit in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

CVE-2018-11206

An out of bounds read was discovered in H5Ofillnewdecode and H5Ofillolddecode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

UBUNTU-CVE-2018-11202

A NULL pointer dereference was discovered in H5Shypermakespans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

UBUNTU-CVE-2018-11207

A division by zero was discovered in H5Dchunkinit in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

DEBIAN-CVE-2018-11203

A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

CVE-2018-11203

A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

CVE-2018-11207

CVE-2018-11207 affects HDF5 (HDF5 1.10.2) with a division-by-zero in H5D__chunk_init (H5Dchunk.c) that could allow a remote denial-of-service. Connected advisories note this is fixed in later HDF5/SUSE patches (e.g., 1.10.5 and related security updates). Affected products include HDF5 1.10.x, wit...

CVE-2018-11204

A NULL pointer dereference was discovered in H5Ochunkdeserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

CVE-2018-11202

CVE-2018-11202 affects HDF5 1.10.2 where a NULL pointer dereference in H5S_hyper_make_spans (H5Shyper.c) can lead to remote denial of service. The issue is addressed in later HDF5 updates; SUSE SUSE-SU-2024:3144-1 notes fixes for CVE-2018-11202 when upgrading hdf5 to 1.10.11. If you rely on affec...

CVE-2018-11205

A out of bounds read was discovered in H5VMmemcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

CVE-2018-11206

CVE-2018-11206 is an out-of-bounds read in HDF5 1.10.2 (H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c) that could enable remote denial of service or information disclosure. Public docs confirm the vulnerability and indicate fixed releases across distributions: Debian notes a fix in 1.1...

PT-2018-10392 · Hdf +1 · Hdf5 +1

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.2 Description: A NULL pointer dereference was discovered in the H5S hyper make spans function in H5Shyper.c. This issue could allow a remote denial of service attack. Recommendations: For version 1.10.2, consider updating to...

UBUNTU-CVE-2017-17505

In HDF5 1.10.1, there is a NULL pointer dereference in the function H5Oplinedecode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...