In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade hdf5 | Jul 30, 2024 | Dec 11, 2017 |
| Suse | — | Upgrade libhdf5hl_fortran_1_10_7-gnu-hpcUpgrade libhdf5-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-gnu-mvapich2-hpc-develUpgrade hdf5_1_10_7-gnu-hpc-develUpgrade libhdf5_hl_fortran-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpc-develUpgrade libhdf5_fortran-gnu-mpich-hpcUpgrade hdf5_1_10_7-gnu-mpich-hpc-devel-staticUpgrade libhdf5_fortran_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5-gnu-mpich-hpcUpgrade libhdf5_hl_cpp-gnu-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_hl_cpp-gnu-mvapich2-hpcUpgrade libhdf5_cpp_1_10_7-gnu-openmpi4-hpcUpgrade hdf5-gnu-mvapich2-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5_1_10_7-gnu-openmpi3-hpcUpgrade hdf5-gnu-openmpi3-hpc-develUpgrade libhdf5_cpp_1_10_7-gnu-hpcUpgrade hdf5_1_10_7-gnu-mvapich2-hpc-moduleUpgrade libhdf5_fortran-gnu-openmpi4-hpcUpgrade hdf5-hpc-examplesUpgrade libhdf5_hl_1_10_7-gnu-mpich-hpcUpgrade libhdf5_cpp-gnu-openmpi4-hpcUpgrade libhdf5_cpp_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5-gnu-hpcUpgrade hdf5_1_10_7-gnu-hpc-moduleUpgrade libhdf5_fortran_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5_hl-gnu-mvapich2-hpcUpgrade hdf5-gnu-openmpi3-hpcUpgrade libhdf5_fortran-gnu-mvapich2-hpcUpgrade libhdf5_cpp-gnu-openmpi3-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-mvapich2-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpc-devel-staticUpgrade libhdf5_fortran_1_10_7-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-mpich-hpc-moduleUpgrade libhdf5_fortran_1_10_7-gnu-mpich-hpcUpgrade libhdf5_hl_cpp-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-gnu-hpc-devel-staticUpgrade hdf5_1_10_7-gnu-openmpi3-hpc-moduleUpgrade libhdf5_hl_cpp-gnu-mpich-hpcUpgrade libhdf5_fortran-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpc-moduleUpgrade libhdf5_cpp-gnu-mpich-hpcUpgrade libhdf5_hl_1_10_7-gnu-hpcUpgrade libhdf5-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpc-develUpgrade libhdf5_1_10_7-gnu-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-mpich-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5_hl-gnu-openmpi3-hpcUpgrade libhdf5_hl_fortran-gnu-mvapich2-hpcUpgrade libhdf5_1_10_7-gnu-openmpi4-hpcUpgrade hdf5-gnu-hpc-develUpgrade hdf5-gnu-mpich-hpc-develUpgrade libhdf5_hl_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5_hl_fortran-gnu-hpcUpgrade libhdf5_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_cpp-gnu-mvapich2-hpcUpgrade libhdf5_hl_fortran-gnu-openmpi3-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-hpcUpgrade libhdf5_cpp-gnu-hpcUpgrade hdf5-gnu-openmpi4-hpc-develUpgrade hdf5_1_10_7-gnu-mvapich2-hpc-devel-staticUpgrade hdf5-gnu-openmpi4-hpcUpgrade libhdf5-gnu-mvapich2-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-mpich-hpcUpgrade libhdf5_1_10_7-gnu-mpich-hpcUpgrade libhdf5_fortran_1_10_7-gnu-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5_hl_1_10_7-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-hpc-examplesUpgrade libhdf5_hl-gnu-openmpi4-hpcUpgrade libhdf5_hl-gnu-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpc-devel-staticUpgrade libhdf5_cpp_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_hl_cpp-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-mpich-hpc-develUpgrade libhdf5_hl-gnu-mpich-hpcUpgrade libhdf5_hl_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-mpich-hpcUpgrade libhdf5_hl_fortran-gnu-mpich-hpcUpgrade hdf5_1_10_7-gnu-mvapich2-hpcUpgrade hdf5_1_10_7-gnu-hpcUpgrade libhdf5_cpp_1_10_7-gnu-mpich-hpcUpgrade libhdf5_fortran-gnu-hpcUpgrade hdf5-gnu-mpich-hpcUpgrade hdf5-gnu-hpcUpgrade hdf5-gnu-mvapich2-hpc-devel | Feb 4, 2022 | Dec 10, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 11, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub