PT-2024-6193

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T ref mem setnull function in the H5Tref.c file of the HDF5 Library, which can lead to the corruption of the instruction pointer...

PT-2024-6191

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap buffer overflow in the H5O mtime new encode function in the H5Omtime.c file of the HDF5 library. This can be exploited by a remote attacker to impact the...

PT-2024-6211

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to the h5tools str sprint function in the h5tools str.c file of the HDF5 Library, which may attempt to dereference uninitialized values. This could potentially allow an...

PT-2024-6210

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a buffer overflow in the heap, caused by the H5A close function in the H5Aint.c file of the HDF5 library, leading to corruption of the instruction pointer. This can be...

PT-2024-6197

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer over-read in the H5F addr decode len function in the H5Fint.c file of the HDF5 library. This can cause corruption of the instruction pointer. The...

PT-2024-6203

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to a function H5VM memcpyvv in the file H5VM.c of the HDF5 Library, which is associated with a memory access out of bounds. This can potentially allow a remote attacker ...

PT-2024-6207

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to a corrupted instruction pointer due to a SEGV in the H5T close real function in the H5T.c file. This is caused by a buffer overflow in memory, which can lead to a...

PT-2024-6199

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T get native type function in the H5Tnative.c file of the HDF5 Library. This overflow can result in the corruption of the instructi...

PT-2024-6198

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to a heap-based buffer overflow in the H5T copy reopen function in the H5T.c file of the HDF5 Library. This overflow can result in the corruption of the instruction...

PT-2024-6212

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer over-read in the H5VM memcpyvv function in the H5VM.c file of the HDF5 library. This can be exploited by a remote attacker to impact the...

PT-2024-6194

Name of the Vulnerable Software and Affected Versions HDF5 Library versions through 1.14.3 Description The issue is related to a heap-based buffer overflow in the H5VM array fill function in the H5VM.c file of the HDF5 Library. This overflow can be triggered when the H5S select elements function ...

PT-2024-6208

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to the function H5E printf stack in the file H5Eint.c of the HDF5 Library, which is associated with uncontrolled recursion. This can lead to stack consumption. Exploitation...

PT-2024-6188

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5T conv struct opt function in the H5Tconv.c file of the HDF5 Library. This could potentially allow a remote attacker to impact the...

PT-2024-6192

Name of the Vulnerable Software and Affected Versions HDF5 Library versions prior to 1.14.4 Description The issue is related to a heap-based buffer overflow in the H5D scatter mem function in the H5Dscatgath.c file of the HDF5 Library. This can potentially allow a remote attacker to impact the...

SUSE SLES15: hdf5-gnu-hpc / hdf5-gnu-hpc-devel / hdf5-gnu-mpich-hpc / etc (SUSE-SU-2024:0538-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0538-1 advisory. Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a...

SUSE CVE-2016-4332

The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This...

SUSE CVE-2016-4330

In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution...

SUSE CVE-2017-17505

In HDF5 1.10.1, there is a NULL pointer dereference in the function H5Oplinedecode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

SUSE CVE-2018-11202

A NULL pointer dereference was discovered in H5Shypermakespans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

SUSE CVE-2018-15671

An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5Pgetcb in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service...