Name: CVE-2024-32608: Out-of-bounds Write
Creator: Rapid7
Published: 2024-10-09T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2024-32608, CVSS 9.8, EPSS 0.00669

HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade hdf5	May 15, 2025	Oct 9, 2024
Suse	—	Upgrade openmpi_4_1_4-gnu-hpc-devel-staticUpgrade pmix-headersUpgrade openmpi_4_1_4-gnu-hpc-testsuiteUpgrade openmpi_4_1_6-gnu-hpc-docsUpgrade libhdf5_cpp_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5-gnu-mvapich2-hpcUpgrade hdf5_1_10_11-gnu-openmpi3-hpc-develUpgrade mvapich2_2_3_7-gnu-hpc-docUpgrade mpich_4_0_2-gnu-hpc-develUpgrade mvapich2-psm-gnu-hpcUpgrade libhdf5-gnu-hpcUpgrade libhdf5_fortran-gnu-openmpi3-hpcUpgrade libhdf5_1_10_11-gnu-mvapich2-hpcUpgrade mvapich2-psm_2_3_7-gnu-hpcUpgrade mpich-ofi-gnu-hpc-develUpgrade libopenmpi4-gnu-hpcUpgrade pmix-pluginsUpgrade hdf5-hpc-examplesUpgrade hdf5_1_10_11-gnu-mvapich2-hpc-devel-staticUpgrade hdf5_1_10_11-gnu-openmpi3-hpcUpgrade hdf5-gnu-hpc-develUpgrade hdf5_1_10_11-gnu-mvapich2-hpcUpgrade hdf5_1_10_11-hpc-examplesUpgrade libhdf5_cpp-gnu-openmpi4-hpcUpgrade mpich-gnu-hpc-macros-develUpgrade mpich-ofi-develUpgrade libhdf5_fortran_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5hl_fortran_1_10_11-gnu-mvapich2-hpcUpgrade pmix-develUpgrade mvapich2-gnu-hpc-macros-develUpgrade libhdf5_fortran-gnu-hpcUpgrade mpich-ofi_4_1_2-gnu-hpc-develUpgrade hdf5_1_10_11-gnu-mvapich2-hpc-develUpgrade hdf5_1_10_11-gnu-openmpi1-hpc-develUpgrade mvapich2-psm_2_3_7-gnu-hpc-docUpgrade libhdf5_cpp-gnu-mvapich2-hpcUpgrade hdf5_1_10_11-gnu-openmpi3-hpc-moduleUpgrade mvapich2-psmUpgrade libhdf5_hl_1_10_11-gnu-hpcUpgrade libhdf5_hl_fortran-gnu-openmpi4-hpcUpgrade mpich-ofi-gnu-hpc-macros-develUpgrade openmpi4-gnu-hpc-develUpgrade libhdf5_cpp_1_10_11-gnu-mpich-hpcUpgrade hdf5_1_10_11-gnu-mpich-hpc-develUpgrade libhdf5hl_fortran_1_10_11-gnu-openmpi3-hpcUpgrade openmpi4Upgrade libhdf5_hl_1_10_11-gnu-openmpi4-hpcUpgrade mpich-ofi-gnu-hpcUpgrade openmpi_4_1_4-gnu-hpc-macros-develUpgrade libhdf5-gnu-openmpi3-hpcUpgrade libpmix2Upgrade libhdf5_cpp-gnu-openmpi3-hpcUpgrade openmpi_4_1_6-gnu-hpc-develUpgrade libhdf5_hl-gnu-openmpi3-hpcUpgrade mvapich2-docUpgrade mpich-gnu-hpc-devel-staticUpgrade hdf5-gnu-openmpi3-hpcUpgrade openmpi_4_1_4-gnu-hpc-docsUpgrade libhdf5_hl-gnu-openmpi4-hpcUpgrade hdf5_1_10_11-gnu-openmpi4-hpc-develUpgrade libhdf5_hl_cpp_1_10_11-gnu-openmpi4-hpcUpgrade mvapich2-psm2_2_3_7-gnu-hpc-devel-staticUpgrade libhdf5-gnu-openmpi1-hpcUpgrade libhdf5_cpp_1_10_11-gnu-openmpi1-hpcUpgrade hdf5_1_10_11-gnu-openmpi4-hpc-devel-staticUpgrade mvapich2-psm_2_3_7-gnu-hpc-develUpgrade mvapich2_2_3_7-gnu-hpc-develUpgrade openmpi4-macros-develUpgrade openmpi_4_1_6-gnu-hpcUpgrade libhdf5_fortran-gnu-openmpi4-hpcUpgrade hdf5-gnu-hpcUpgrade openmpi4-gnu-hpc-docsUpgrade hdf5_1_10_11-gnu-openmpi1-hpcUpgrade mpich-gnu-hpc-develUpgrade mvapich2-gnu-hpc-docUpgrade libhdf5_hl_fortran-gnu-hpcUpgrade mvapich2-psm-docUpgrade libhdf5_cpp_1_10_11-gnu-openmpi3-hpcUpgrade libhdf5_hl_cpp-gnu-mvapich2-hpcUpgrade openmpi4-gnu-hpc-macros-develUpgrade mpich_4_1_2-gnu-hpcUpgrade openmpi4-docsUpgrade mpich-ofi_4_0_2-gnu-hpc-macros-develUpgrade hdf5_1_10_11-gnu-hpc-develUpgrade openmpi4-libsUpgrade mpich_4_0_2-gnu-hpc-macros-develUpgrade lua51-luatermUpgrade hdf5_1_10_11-gnu-hpc-moduleUpgrade mpich_4_1_2-gnu-hpc-develUpgrade mvapich2-psm2-devel-staticUpgrade mpich-ofi_4_0_2-gnu-hpc-develUpgrade mvapich2-psm_2_3_7-gnu-hpc-devel-staticUpgrade mpich-develUpgrade openmpi_4_1_4-gnu-hpc-develUpgrade hdf5_1_10_11-gnu-openmpi4-hpc-moduleUpgrade hdf5_1_10_11-gnu-openmpi1-hpc-moduleUpgrade libhdf5_fortran_1_10_11-gnu-mpich-hpcUpgrade pmix-testUpgrade libhdf5_hl_1_10_11-gnu-mpich-hpcUpgrade openmpi_4_1_6-gnu-hpc-macros-develUpgrade libhdf5_hl_cpp_1_10_11-gnu-hpcUpgrade libhdf5_hl_cpp_1_10_11-gnu-openmpi3-hpcUpgrade lua53-luatermUpgrade mvapich2_2_3_7-gnu-hpc-macros-develUpgrade libhdf5_hl_1_10_11-gnu-mvapich2-hpcUpgrade openmpi_4_1_6-gnu-hpc-testsuiteUpgrade libhdf5hl_fortran_1_10_11-gnu-openmpi1-hpcUpgrade lua51-luaposixUpgrade libopenmpi_4_1_6-gnu-hpcUpgrade libhdf5_hl_1_10_11-gnu-openmpi1-hpcUpgrade mvapich2_2_3_7-gnu-hpc-devel-staticUpgrade mvapich2-psm-gnu-hpc-macros-develUpgrade mvapich2-gnu-hpcUpgrade openmpi4-gnu-hpc-devel-staticUpgrade libhdf5hl_fortran_1_10_11-gnu-mpich-hpcUpgrade libhdf5_hl-gnu-mpich-hpcUpgrade hdf5_1_10_11-gnu-mpich-hpc-moduleUpgrade mpich-ofi_4_1_2-gnu-hpcUpgrade mvapich2-devel-staticUpgrade mvapich2-psm-develUpgrade mvapich2-gnu-hpc-develUpgrade mvapich2-psm2_2_3_7-gnu-hpcUpgrade libopenmpi_4_1_4-gnu-hpcUpgrade libhdf5_cpp-gnu-mpich-hpcUpgrade libhdf5_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5-gnu-openmpi4-hpcUpgrade hdf5-gnu-openmpi1-hpc-develUpgrade pmixUpgrade openmpi4-libs-32bitUpgrade mvapich2-psm_2_3_7-gnu-hpc-macros-develUpgrade mvapich2-psm2_2_3_7-gnu-hpc-develUpgrade mpich_4_1_2-gnu-hpc-macros-develUpgrade libhdf5_1_10_11-gnu-mpich-hpcUpgrade hdf5_1_10_11-gnu-hpc-devel-staticUpgrade hdf5-gnu-openmpi4-hpc-develUpgrade hdf5-gnu-openmpi4-hpcUpgrade pmix-plugin-mungeUpgrade mvapich2-psm2-gnu-hpc-macros-develUpgrade mvapich2-psm2-develUpgrade mvapich2-psm-gnu-hpc-develUpgrade mvapich2-psm2_2_3_7-gnu-hpc-docUpgrade mpich-ofi_4_0_2-gnu-hpcUpgrade lua53-luaposixUpgrade libhdf5_hl_cpp-gnu-openmpi3-hpcUpgrade libhdf5_hl_cpp-gnu-hpcUpgrade hdf5_1_10_11-gnu-hpcUpgrade hdf5-gnu-mpich-hpcUpgrade openmpi4-configUpgrade mvapich2-psm2-gnu-hpcUpgrade libhdf5_fortran-gnu-mvapich2-hpcUpgrade mpich_4_1_2-gnu-hpc-devel-staticUpgrade libhdf5_hl_cpp_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_hl_cpp-gnu-openmpi4-hpcUpgrade libhdf5hl_fortran_1_10_11-gnu-hpcUpgrade libhdf5_hl_fortran-gnu-mvapich2-hpcUpgrade libhdf5_hl_fortran-gnu-mpich-hpcUpgrade libhdf5_hl_cpp_1_10_11-gnu-mpich-hpcUpgrade libhdf5_fortran-gnu-mpich-hpcUpgrade libhdf5_1_10_11-gnu-openmpi3-hpcUpgrade mpich_4_0_2-gnu-hpcUpgrade libhdf5hl_fortran_1_10_11-gnu-openmpi4-hpcUpgrade libmca_common_dstore1Upgrade libhdf5_cpp_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5-gnu-mpich-hpcUpgrade hdf5_1_10_11-gnu-openmpi1-hpc-devel-staticUpgrade hdf5_1_10_11-gnu-mpich-hpc-devel-staticUpgrade mvapich2-psm-gnu-hpc-docUpgrade openmpi4-testsuiteUpgrade mpich-ofi_4_1_2-gnu-hpc-macros-develUpgrade mpich-gnu-hpcUpgrade hdf5_1_10_11-gnu-openmpi3-hpc-devel-staticUpgrade hdf5_1_10_11-gnu-mvapich2-hpc-moduleUpgrade mpichUpgrade luaposix-docUpgrade libhdf5_hl_cpp-gnu-mpich-hpcUpgrade libhdf5_hl_fortran-gnu-openmpi3-hpcUpgrade libhdf5_fortran_1_10_11-gnu-openmpi1-hpcUpgrade pmix-mca-paramsUpgrade openmpi4-develUpgrade mvapich2_2_3_7-gnu-hpcUpgrade mvapich2-psm2-docUpgrade mpich-ofi_4_1_2-gnu-hpc-devel-staticUpgrade mpich-ofi-gnu-hpc-devel-staticUpgrade libhdf5_hl-gnu-mvapich2-hpcUpgrade mvapich2-psm2-gnu-hpc-docUpgrade mvapich2-psm-devel-staticUpgrade libhdf5_fortran-gnu-openmpi1-hpcUpgrade libhdf5_hl-gnu-hpcUpgrade libhdf5_fortran_1_10_11-gnu-hpcUpgrade libhdf5_fortran_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_cpp_1_10_11-gnu-hpcUpgrade openmpi_4_1_6-gnu-hpc-devel-staticUpgrade libhdf5_1_10_11-gnu-openmpi1-hpcUpgrade libhdf5_fortran_1_10_11-gnu-openmpi3-hpcUpgrade mpich-ofiUpgrade hdf5_1_10_11-gnu-openmpi4-hpcUpgrade hdf5-gnu-mvapich2-hpcUpgrade openmpi4-gnu-hpcUpgrade mvapich2-develUpgrade hdf5-gnu-mpich-hpc-develUpgrade libhdf5_1_10_11-gnu-hpcUpgrade openmpi_4_1_4-gnu-hpcUpgrade hdf5_1_10_11-gnu-mpich-hpcUpgrade hdf5-gnu-openmpi3-hpc-develUpgrade mpich_4_0_2-gnu-hpc-devel-staticUpgrade libhdf5_hl-gnu-openmpi1-hpcUpgrade libhdf5_cpp-gnu-hpcUpgrade libhdf5_hl_fortran-gnu-openmpi1-hpcUpgrade hdf5-gnu-mvapich2-hpc-develUpgrade mvapich2-psm2-gnu-hpc-develUpgrade mvapich2Upgrade mvapich2-psm2_2_3_7-gnu-hpc-macros-develUpgrade mpich-ofi_4_0_2-gnu-hpc-devel-staticUpgrade libhdf5_hl_cpp_1_10_11-gnu-openmpi1-hpcUpgrade libhdf5_hl_1_10_11-gnu-openmpi3-hpcUpgrade mvapich2-psm2	Jun 21, 2024	Jun 20, 2024

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence