rpm package
suse/hdf5_1_10_8-gnu-openmpi1-hpc&distro=SUSE Linux Enterprise Module for HPC 12
pkg:rpm/suse/hdf5_1_10_8-gnu-openmpi1-hpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2012
Vulnerabilities (38)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-17233 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Sep 20, 2018 | A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service a | |
| CVE-2018-16438 | Hig | 8.8 | < 1.10.8-3.15.1 | 1.10.8-3.15.1 | Sep 4, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c. | |
| CVE-2018-14460 | Hig | 8.8 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Jul 20, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c. | |
| CVE-2018-14033 | Hig | 8.8 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Jul 13, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy. | |
| CVE-2018-14031 | Hig | 8.8 | < 1.10.8-3.15.1 | 1.10.8-3.15.1 | Jul 13, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c. | |
| CVE-2018-13870 | Cri | 9.8 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Jul 10, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c. | |
| CVE-2018-13869 | Cri | 9.8 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Jul 10, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. | |
| CVE-2018-13867 | Cri | 9.8 | < 1.10.8-3.15.1 | 1.10.8-3.15.1 | Jul 10, 2018 | An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c. | |
| CVE-2018-11207 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | May 16, 2018 | A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. | |
| CVE-2018-11206 | Hig | 8.1 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | May 16, 2018 | An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack. | |
| CVE-2018-11205 | Hig | 8.1 | < 1.10.8-3.15.1 | 1.10.8-3.15.1 | May 16, 2018 | A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack. | |
| CVE-2018-11204 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | May 16, 2018 | A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. | |
| CVE-2018-11203 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | May 16, 2018 | A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. | |
| CVE-2018-11202 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | May 16, 2018 | A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. | |
| CVE-2017-17509 | Hig | 8.8 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Dec 11, 2017 | In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file. | |
| CVE-2017-17508 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Dec 11, 2017 | In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file. | |
| CVE-2017-17506 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Dec 11, 2017 | In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file. | |
| CVE-2017-17505 | Med | 6.5 | < 1.10.8-3.12.2 | 1.10.8-3.12.2 | Dec 11, 2017 | In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file. |
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service a
- affected < 1.10.8-3.15.1fixed 1.10.8-3.15.1
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
- affected < 1.10.8-3.15.1fixed 1.10.8-3.15.1
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c.
- affected < 1.10.8-3.15.1fixed 1.10.8-3.15.1
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
- affected < 1.10.8-3.15.1fixed 1.10.8-3.15.1
A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
- affected < 1.10.8-3.12.2fixed 1.10.8-3.12.2
In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Page 2 of 2