ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | no-fix-debian-deb-package | May 15, 2025 | Sep 24, 2018 | |
| Suse | — | suse-upgrade-hdf5-gnu-hpcsuse-upgrade-hdf5-gnu-hpc-develsuse-upgrade-hdf5-gnu-mpich-hpcsuse-upgrade-hdf5-gnu-mpich-hpc-develsuse-upgrade-hdf5-gnu-mvapich2-hpcsuse-upgrade-hdf5-gnu-mvapich2-hpc-develsuse-upgrade-hdf5-gnu-openmpi1-hpc-develsuse-upgrade-hdf5-gnu-openmpi3-hpcsuse-upgrade-hdf5-gnu-openmpi3-hpc-develsuse-upgrade-hdf5-gnu-openmpi4-hpcsuse-upgrade-hdf5-gnu-openmpi4-hpc-develsuse-upgrade-hdf5-hpc-examplessuse-upgrade-hdf5_1_10_8-gnu-hpcsuse-upgrade-hdf5_1_10_8-gnu-hpc-develsuse-upgrade-hdf5_1_10_8-gnu-hpc-devel-staticsuse-upgrade-hdf5_1_10_8-gnu-hpc-modulesuse-upgrade-hdf5_1_10_8-gnu-mpich-hpcsuse-upgrade-hdf5_1_10_8-gnu-mpich-hpc-develsuse-upgrade-hdf5_1_10_8-gnu-mpich-hpc-devel-staticsuse-upgrade-hdf5_1_10_8-gnu-mpich-hpc-modulesuse-upgrade-hdf5_1_10_8-gnu-mvapich2-hpcsuse-upgrade-hdf5_1_10_8-gnu-mvapich2-hpc-develsuse-upgrade-hdf5_1_10_8-gnu-mvapich2-hpc-devel-staticsuse-upgrade-hdf5_1_10_8-gnu-mvapich2-hpc-modulesuse-upgrade-hdf5_1_10_8-gnu-openmpi1-hpcsuse-upgrade-hdf5_1_10_8-gnu-openmpi1-hpc-develsuse-upgrade-hdf5_1_10_8-gnu-openmpi1-hpc-devel-staticsuse-upgrade-hdf5_1_10_8-gnu-openmpi1-hpc-modulesuse-upgrade-hdf5_1_10_8-gnu-openmpi3-hpcsuse-upgrade-hdf5_1_10_8-gnu-openmpi3-hpc-develsuse-upgrade-hdf5_1_10_8-gnu-openmpi3-hpc-devel-staticsuse-upgrade-hdf5_1_10_8-gnu-openmpi3-hpc-modulesuse-upgrade-hdf5_1_10_8-gnu-openmpi4-hpcsuse-upgrade-hdf5_1_10_8-gnu-openmpi4-hpc-develsuse-upgrade-hdf5_1_10_8-gnu-openmpi4-hpc-devel-staticsuse-upgrade-hdf5_1_10_8-gnu-openmpi4-hpc-modulesuse-upgrade-hdf5_1_10_8-hpc-examplessuse-upgrade-libhdf5-103suse-upgrade-libhdf5-gnu-hpcsuse-upgrade-libhdf5-gnu-mpich-hpcsuse-upgrade-libhdf5-gnu-mvapich2-hpcsuse-upgrade-libhdf5-gnu-openmpi1-hpcsuse-upgrade-libhdf5-gnu-openmpi3-hpcsuse-upgrade-libhdf5-gnu-openmpi4-hpcsuse-upgrade-libhdf5_1_10_8-gnu-hpcsuse-upgrade-libhdf5_1_10_8-gnu-mpich-hpcsuse-upgrade-libhdf5_1_10_8-gnu-mvapich2-hpcsuse-upgrade-libhdf5_1_10_8-gnu-openmpi1-hpcsuse-upgrade-libhdf5_1_10_8-gnu-openmpi3-hpcsuse-upgrade-libhdf5_1_10_8-gnu-openmpi4-hpcsuse-upgrade-libhdf5_cpp-gnu-hpcsuse-upgrade-libhdf5_cpp-gnu-mpich-hpcsuse-upgrade-libhdf5_cpp-gnu-mvapich2-hpcsuse-upgrade-libhdf5_cpp-gnu-openmpi3-hpcsuse-upgrade-libhdf5_cpp-gnu-openmpi4-hpcsuse-upgrade-libhdf5_cpp_1_10_8-gnu-hpcsuse-upgrade-libhdf5_cpp_1_10_8-gnu-mpich-hpcsuse-upgrade-libhdf5_cpp_1_10_8-gnu-mvapich2-hpcsuse-upgrade-libhdf5_cpp_1_10_8-gnu-openmpi3-hpcsuse-upgrade-libhdf5_cpp_1_10_8-gnu-openmpi4-hpcsuse-upgrade-libhdf5_fortran-gnu-hpcsuse-upgrade-libhdf5_fortran-gnu-mpich-hpcsuse-upgrade-libhdf5_fortran-gnu-mvapich2-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi1-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi3-hpcsuse-upgrade-libhdf5_fortran-gnu-openmpi4-hpcsuse-upgrade-libhdf5_fortran_1_10_8-gnu-hpcsuse-upgrade-libhdf5_fortran_1_10_8-gnu-mpich-hpcsuse-upgrade-libhdf5_fortran_1_10_8-gnu-mvapich2-hpcsuse-upgrade-libhdf5_fortran_1_10_8-gnu-openmpi1-hpcsuse-upgrade-libhdf5_fortran_1_10_8-gnu-openmpi3-hpcsuse-upgrade-libhdf5_fortran_1_10_8-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl-gnu-hpcsuse-upgrade-libhdf5_hl-gnu-mpich-hpcsuse-upgrade-libhdf5_hl-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi1-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl100suse-upgrade-libhdf5_hl_1_10_8-gnu-hpcsuse-upgrade-libhdf5_hl_1_10_8-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_1_10_8-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_1_10_8-gnu-openmpi1-hpcsuse-upgrade-libhdf5_hl_1_10_8-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_1_10_8-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_cpp-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_8-gnu-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_8-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-mpich-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-mvapich2-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi1-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi3-hpcsuse-upgrade-libhdf5_hl_fortran-gnu-openmpi4-hpcsuse-upgrade-libhdf5hl_fortran_1_10_8-gnu-hpcsuse-upgrade-libhdf5hl_fortran_1_10_8-gnu-mpich-hpcsuse-upgrade-libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpcsuse-upgrade-libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpcsuse-upgrade-libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpcsuse-upgrade-libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpcsuse-upgrade-suse-hpc | Aug 9, 2024 | Sep 24, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub