Name: CVE-2018-13870: Out-of-bounds Read
Creator: Rapid7
Published: 2018-07-10T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-13870, CWE-125, CVSS 9.8, EPSS 0.01997

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade hdf5	Aug 22, 2024	Jul 10, 2018
Debian	—	Upgrade hdf5	Jul 30, 2024	Jul 10, 2018
Redhat_linux	—	No solution exists	Jul 9, 2025	Jul 10, 2018
Suse	—	Upgrade hdf5_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_hl-gnu-openmpi4-hpcUpgrade libhdf5-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5_fortran-gnu-mpich-hpcUpgrade libhdf5_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_cpp-gnu-mvapich2-hpcUpgrade libhdf5_hl-gnu-hpcUpgrade hdf5-gnu-mvapich2-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpc-devel-staticUpgrade hdf5_1_10_7-gnu-mvapich2-hpc-moduleUpgrade libhdf5_hl_cpp-gnu-mpich-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-hpc-examplesUpgrade libhdf5_cpp_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_1_10_7-gnu-hpcUpgrade hdf5_1_10_7-gnu-hpcUpgrade libhdf5-gnu-openmpi4-hpcUpgrade libhdf5_hl_fortran-gnu-hpcUpgrade libhdf5_cpp_1_10_7-gnu-mpich-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-mpich-hpcUpgrade libhdf5_hl-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-mpich-hpc-devel-staticUpgrade libhdf5_hl_cpp-gnu-openmpi3-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-gnu-mpich-hpc-develUpgrade hdf5_1_10_7-gnu-hpc-develUpgrade hdf5_1_10_7-gnu-mpich-hpc-moduleUpgrade libhdf5_hl-gnu-mvapich2-hpcUpgrade libhdf5_hl-gnu-mpich-hpcUpgrade hdf5-gnu-openmpi4-hpcUpgrade libhdf5_cpp-gnu-mpich-hpcUpgrade hdf5_1_10_7-gnu-hpc-moduleUpgrade hdf5_1_10_7-gnu-mpich-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-mpich-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-hpcUpgrade libhdf5_hl_1_10_7-gnu-mpich-hpcUpgrade hdf5_1_10_7-gnu-mvapich2-hpc-devel-staticUpgrade libhdf5_fortran_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_fortran-gnu-mvapich2-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpc-moduleUpgrade libhdf5_hl_cpp_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5_hl_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5_fortran_1_10_7-gnu-mpich-hpcUpgrade libhdf5hl_fortran_1_10_7-gnu-hpcUpgrade libhdf5_cpp-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpc-devel-staticUpgrade libhdf5_fortran_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_hl_cpp-gnu-openmpi4-hpcUpgrade hdf5-hpc-examplesUpgrade libhdf5_hl_fortran-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-hpc-devel-staticUpgrade hdf5-gnu-hpcUpgrade libhdf5_cpp_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5_fortran_1_10_7-gnu-hpcUpgrade libhdf5-gnu-mvapich2-hpcUpgrade hdf5-gnu-hpc-develUpgrade libhdf5_hl_1_10_7-gnu-hpcUpgrade libhdf5_hl_fortran-gnu-mvapich2-hpcUpgrade libhdf5_fortran-gnu-hpcUpgrade libhdf5_1_10_7-gnu-mpich-hpcUpgrade libhdf5_fortran_1_10_7-gnu-openmpi3-hpcUpgrade libhdf5_1_10_7-gnu-openmpi4-hpcUpgrade hdf5-gnu-openmpi3-hpcUpgrade libhdf5_hl_cpp-gnu-hpcUpgrade libhdf5_1_10_7-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-openmpi3-hpc-develUpgrade libhdf5-gnu-mpich-hpcUpgrade libhdf5_hl_cpp_1_10_7-gnu-mvapich2-hpcUpgrade hdf5-gnu-mpich-hpc-develUpgrade hdf5_1_10_7-gnu-openmpi4-hpc-develUpgrade libhdf5_hl_fortran-gnu-openmpi4-hpcUpgrade libhdf5_hl_1_10_7-gnu-openmpi4-hpcUpgrade hdf5_1_10_7-gnu-mvapich2-hpc-develUpgrade libhdf5_cpp_1_10_7-gnu-hpcUpgrade libhdf5_cpp-gnu-openmpi3-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5_cpp_1_10_7-gnu-openmpi4-hpcUpgrade libhdf5-gnu-hpcUpgrade hdf5-gnu-openmpi4-hpc-develUpgrade libhdf5hl_fortran_1_10_7-gnu-openmpi3-hpcUpgrade hdf5-gnu-openmpi3-hpc-develUpgrade libhdf5_fortran-gnu-openmpi3-hpcUpgrade libhdf5_hl_fortran-gnu-mpich-hpcUpgrade libhdf5_cpp-gnu-hpcUpgrade hdf5-gnu-mpich-hpcUpgrade hdf5_1_10_7-gnu-openmpi4-hpc-moduleUpgrade libhdf5_hl_cpp-gnu-mvapich2-hpcUpgrade libhdf5_hl_1_10_7-gnu-mvapich2-hpcUpgrade libhdf5_fortran-gnu-openmpi4-hpcUpgrade hdf5-gnu-mvapich2-hpc-devel	Feb 4, 2022	Jul 10, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence