Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : HDF5 vulnerabilities (USN-5272-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5272-1 advisory. It was discovered that HDF5 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of...

Debian dla-3522 : hdf5-helpers - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3522 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3522-1 [email protected]...

SUSE SLES12 Security Update : hdf5, suse-hpc (SUSE-SU-2022:1933-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1933-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c...

CVE-2018-17234

CVE-2018-17234 involves a memory leak in the HDF5 library (H5O__chunk_deserialize() in H5Ocache.c) that can be triggered by a crafted HDF5 file, leading to a denial of service through memory exhaustion. The provided connected documents confirm this root cause and the impact. Affected product: HDF...

CVE-2018-17234

Memory leak in the H5Ochunkdeserialize function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service memory consumption via a crafted HDF5 file...