A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-hdf5 | Aug 10, 2023 | Sep 20, 2018 | |
| Suse | — | suse-upgrade-hdf5-gnu-hpcsuse-upgrade-hdf5-gnu-hpc-develsuse-upgrade-hdf5-gnu-mpich-hpcsuse-upgrade-hdf5-gnu-mpich-hpc-develsuse-upgrade-hdf5-gnu-mvapich2-hpcsuse-upgrade-hdf5-gnu-mvapich2-hpc-develsuse-upgrade-hdf5-gnu-openmpi3-hpcsuse-upgrade-hdf5-gnu-openmpi3-hpc-develsuse-upgrade-hdf5-gnu-openmpi4-hpcsuse-upgrade-hdf5-gnu-openmpi4-hpc-develsuse-upgrade-hdf5-hpc-examplessuse-upgrade-hdf5_1_10_7-gnu-hpcsuse-upgrade-hdf5_1_10_7-gnu-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-mpich-hpcsuse-upgrade-hdf5_1_10_7-gnu-mpich-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-mpich-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-mpich-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpcsuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-mvapich2-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpcsuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-openmpi3-hpc-modulesuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpcsuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpc-develsuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpc-devel-staticsuse-upgrade-hdf5_1_10_7-gnu-openmpi4-hpc-modulesuse-upgrade-hdf5_1_10_7-hpc-examplessuse-upgrade-libhdf5-gnu-hpcsuse-upgrade-libhdf5-gnu-mpich-hpcsuse-upgrade-libhdf5-gnu-mvapich2-hpcsuse-upgrade-libhdf5-gnu-openmpi3-hpcsuse-upgrade-libhdf5-gnu-openmpi4-hpcsuse-upgrade-libhdf5_1_10_7-gnu-hpcsuse-upgrade-libhdf5_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_cpp-gnu-hpcsuse-upgrade-libhdf5_cpp-gnu-mpich-hpcsuse-upgrade-libhdf5_cpp-gnu-mvapich2-hpcsuse-upgrade-libhdf5_cpp-gnu-openmpi3-hpcsuse-upgrade-libhdf5_cpp-gnu-openmpi4-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_cpp_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_fortran-gnu-hpcsuse-upgrade-libhdf5_fortran-gnu-mpich-hpcsuse-upgrade-libhdf5_fortran-gnu-mvapich2-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi3-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi4-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_fortran_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl-gnu-hpcsuse-upgrade-libhdf5_hl-gnu-mpich-hpcsuse-upgrade-libhdf5_hl-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_7-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi4-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-mpich-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-mvapich2-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-openmpi3-hpcsuse-upgrade-libhdf5hl_fortran_1_10_7-gnu-openmpi4-hpc | Feb 4, 2022 | Sep 20, 2018 |
| Ubuntu | ubuntu-pro-upgrade-hdf5-helpersubuntu-pro-upgrade-hdf5-toolsubuntu-pro-upgrade-libhdf5-10ubuntu-pro-upgrade-libhdf5-100ubuntu-pro-upgrade-libhdf5-103ubuntu-pro-upgrade-libhdf5-7ubuntu-pro-upgrade-libhdf5-cpp-100ubuntu-pro-upgrade-libhdf5-cpp-103ubuntu-pro-upgrade-libhdf5-cpp-11ubuntu-pro-upgrade-libhdf5-javaubuntu-pro-upgrade-libhdf5-jniubuntu-pro-upgrade-libhdf5-mpich-10ubuntu-pro-upgrade-libhdf5-mpich-100ubuntu-pro-upgrade-libhdf5-mpich-103ubuntu-pro-upgrade-libhdf5-mpich2-7ubuntu-pro-upgrade-libhdf5-openmpi-10ubuntu-pro-upgrade-libhdf5-openmpi-100ubuntu-pro-upgrade-libhdf5-openmpi-103ubuntu-pro-upgrade-libhdf5-openmpi-7 | Mar 22, 2023 | Sep 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub