CVE-2018-17439

CVE-2018-17439 : A stack-based buffer overflow in the HDF5 1.10.3 library affects the H5S_extent_get_dims() function in H5S.c, triggered when converting an HDF5 file to a GIF. This issue, observed in the HDF5 1.10.3 stack, could lead to memory corruption and is documented in Nessus/SUSE advisorie...

CVE-2018-17436

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

CVE-2018-17432

A NULL pointer dereference in H5Osdspaceencode in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file...

CVE-2018-17432

CVE-2018-17432: In HDF5 up to v1.10.3, a NULL pointer dereference in H5O_sdspace_encode() (H5Osdspace.c) can cause a denial of service when processing a crafted HDF5 file. The entry references a fixed issue in SUSE advisories (HDF5 updates) and notes a NULL pointer dereference vulnerability; no e...

CVE-2018-17435

CVE-2018-17435 is a heap-based buffer over-read in H5O_attr_decode() of HDF5 (H5Oattr.c) up to version 1.10.3, enabling a denial of service when processing a crafted HDF5 file (noted to occur during conversion to GIF). Connected advisories from SUSE (SUSE-SU-2022-1910/1911) document this CVE as f...

CVE-2018-17436

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

CVE-2018-17436

CVE-2018-17436 affects ReadCode() in decompress.c of the HDF5 library (up to 1.10.3). A crafted HDF5 file, produced during GIF-to-HDF conversion, can cause a denial of service via invalid write access. Connected advisories (e.g., SUSE-SU-2022:1912-1 and related OSV entries) indicate this CVE was ...

CVE-2018-17435

A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file...

CVE-2018-17432

A NULL pointer dereference in H5Osdspaceencode in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file...

CVE-2018-17438

A SIGFPE signal is raised in the function H5Dselectio of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

CVE-2018-17434

CVE-2018-17434 affects the HDF5 library (HDF5 1.10.3 and earlier) where a SIGFPE is raised in apply_filters() during parsing of crafted HDF5 files due to insufficient protection against division by zero. This can enable a remote denial-of-service attack. Public advisories confirm the issue and sp...

CVE-2018-17437

CVE-2018-17437 affects HDF5 up to 1.10.3, causing a memory leak in H5O_dtype_decode_helper() in H5Odtype.c that can lead to denial of service via a crafted HDF5 file. Connected advisories document this as a real issue fixed in later releases: Debian 10 (DLA-3522-1) notes CVE-2018-17437 among fixe...

PT-2018-3949 · Hdf +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 versions 1.10.3 and earlier Description: The issue is related to a memory leak in the H5O dtype decode helper function in the H5Odtype.c component of the HDF5 library. This allows attackers to cause a denial of service due to memory...

CVE-2018-17434

A SIGFPE signal is raised in the function applyfilters of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

DEBIAN-CVE-2018-17237

A SIGFPE signal is raised in the function H5Dchunksetinforeal of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207...

CVE-2018-17237

A SIGFPE signal is raised in the function H5Dchunksetinforeal of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207...

CVE-2018-17233

A SIGFPE signal is raised in the function H5Dcreatechunkfilemaphyper of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

UBUNTU-CVE-2018-17233

A SIGFPE signal is raised in the function H5Dcreatechunkfilemaphyper of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

UBUNTU-CVE-2018-17237

A SIGFPE signal is raised in the function H5Dchunksetinforeal of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207...

CVE-2018-17237

A SIGFPE signal is raised in the function H5Dchunksetinforeal of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207...