Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the H5Ochunkdeserialize function. An attacker can cause excessive resource consumption by providing specially crafted input that triggers repeated processing within this function. Remediation A f...

PT-2021-27778

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5O chunk deserialize function, which is called by H5O cache chk deserialize and H5C protect. Recommendations At th...

PT-2021-27713

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the H5O cont decode function, which is called by H5O chunk deserialize and H5O cache deserialize. Recommendations: At...

PT-2021-27944

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5O cont decode function, which is called by H5O chunk deserialize and H5O cache deserialize. Recommendations At th...

PT-2020-21878

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description The issue is related to a crash that occurs due to a segmentation fault on an unknown address. Technical details about the crash include the involvement of specific function calls: H5O chunk...

PT-2018-12241

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A buffer over-read issue was discovered in the H5O chunk deserialize function within the H5Ocache.c file of the HDF5 library. Recommendations For version 1.8.20, consider updating to a newer version that contain...

PT-2018-10394

Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.2 Description A NULL pointer dereference was discovered in the H5O chunk deserialize function in H5Ocache.c. This issue could allow a remote denial of service attack. Recommendations For version 1.10.2, consider updating to a...