An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-hdf5 | Aug 22, 2024 | Jul 10, 2018 | |
| Debian | debian-upgrade-hdf5 | Jul 30, 2024 | Jul 10, 2018 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jul 10, 2018 | |
| Suse | — | suse-upgrade-hdf5-gnu-hpcsuse-upgrade-hdf5-gnu-hpc-develsuse-upgrade-hdf5-gnu-mpich-hpcsuse-upgrade-hdf5-gnu-mpich-hpc-develsuse-upgrade-hdf5-gnu-mvapich2-hpcsuse-upgrade-hdf5-gnu-mvapich2-hpc-develsuse-upgrade-hdf5-gnu-openmpi3-hpcsuse-upgrade-hdf5-gnu-openmpi3-hpc-develsuse-upgrade-hdf5-gnu-openmpi4-hpcsuse-upgrade-hdf5-gnu-openmpi4-hpc-develsuse-upgrade-hdf5-hpc-examplessuse-upgrade-hdf5_1_10_7-gnu-hpcsuse-upgrade-hdf5_1_10_7-gnu-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-mpich-hpcsuse-upgrade-hdf5_1_10_7-gnu-mpich-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-mpich-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-mpich-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpcsuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpcsuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpcsuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpc-modulesuse-upgrade-hdf5_1_10_7-hpc-examplessuse-upgrade-libhdf5-gnu-hpcsuse-upgrade-libhdf5-gnu-mpich-hpcsuse-upgrade-libhdf5-gnu-mvapich2-hpcsuse-upgrade-libhdf5-gnu-openmpi3-hpcsuse-upgrade-libhdf5-gnu-openmpi4-hpcsuse-upgrade-libhdf5_1_10_7-gnu-hpcsuse-upgrade-libhdf5_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_cpp-gnu-hpcsuse-upgrade-libhdf5_cpp-gnu-mpich-hpcsuse-upgrade-libhdf5_cpp-gnu-mvapich2-hpcsuse-upgrade-libhdf5_cpp-gnu-openmpi3-hpcsuse-upgrade-libhdf5_cpp-gnu-openmpi4-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_fortran-gnu-hpcsuse-upgrade-libhdf5_fortran-gnu-mpich-hpcsuse-upgrade-libhdf5_fortran-gnu-mvapich2-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi3-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi4-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl-gnu-hpcsuse-upgrade-libhdf5_hl-gnu-mpich-hpcsuse-upgrade-libhdf5_hl-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi4-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-openmpi4-hpc | Feb 4, 2022 | Jul 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub