HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instruction pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade hdf5 | May 15, 2025 | May 14, 2024 |
| Suse | — | Upgrade libhdf5_cpp_1_10_11-gnu-openmpi1-hpcUpgrade libhdf5_fortran-gnu-openmpi4-hpcUpgrade libhdf5_fortran_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5_hl-gnu-hpcUpgrade hdf5-gnu-openmpi1-hpc-develUpgrade mpich-ofi_4_1_2-gnu-hpcUpgrade mvapich2-psm2-devel-staticUpgrade mpich-ofi_4_0_2-gnu-hpcUpgrade openmpi_4_1_6-gnu-hpc-devel-staticUpgrade libhdf5_hl_1_10_11-gnu-mpich-hpcUpgrade libhdf5_hl_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5_hl_fortran-gnu-mpich-hpcUpgrade libhdf5-gnu-hpcUpgrade mvapich2-psm-gnu-hpcUpgrade libhdf5_1_10_11-gnu-openmpi1-hpcUpgrade hdf5_1_10_11-gnu-openmpi3-hpcUpgrade hdf5_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5-gnu-openmpi1-hpcUpgrade mpich-ofi-gnu-hpc-devel-staticUpgrade mvapich2-psm-develUpgrade mpich_4_0_2-gnu-hpc-macros-develUpgrade mpich_4_1_2-gnu-hpc-develUpgrade libhdf5hl_fortran_1_10_11-gnu-hpcUpgrade libhdf5_hl_cpp_1_10_11-gnu-openmpi4-hpcUpgrade openmpi4-macros-develUpgrade libhdf5_fortran_1_10_11-gnu-hpcUpgrade libhdf5_hl_fortran-gnu-openmpi4-hpcUpgrade hdf5_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_fortran-gnu-openmpi1-hpcUpgrade libhdf5_hl_cpp_1_10_11-gnu-hpcUpgrade mvapich2_2_3_7-gnu-hpc-develUpgrade libhdf5hl_fortran_1_10_11-gnu-openmpi1-hpcUpgrade libpmix2Upgrade libhdf5hl_fortran_1_10_11-gnu-openmpi3-hpcUpgrade mvapich2-psmUpgrade libhdf5_cpp_1_10_11-gnu-hpcUpgrade mvapich2-psm-gnu-hpc-develUpgrade libhdf5_hl_cpp_1_10_11-gnu-openmpi3-hpcUpgrade libmca_common_dstore1Upgrade libhdf5_1_10_11-gnu-mpich-hpcUpgrade mvapich2-psm2_2_3_7-gnu-hpc-devel-staticUpgrade libhdf5hl_fortran_1_10_11-gnu-openmpi4-hpcUpgrade hdf5-gnu-openmpi4-hpc-develUpgrade hdf5_1_10_11-gnu-hpc-devel-staticUpgrade lua51-luatermUpgrade mvapich2-psm2-gnu-hpc-docUpgrade mvapich2-psm2-gnu-hpc-macros-develUpgrade mpich_4_0_2-gnu-hpc-develUpgrade openmpi4-gnu-hpc-develUpgrade libhdf5_fortran_1_10_11-gnu-mpich-hpcUpgrade libhdf5_hl_cpp-gnu-mvapich2-hpcUpgrade mvapich2-devel-staticUpgrade libhdf5_hl_fortran-gnu-mvapich2-hpcUpgrade mvapich2_2_3_7-gnu-hpcUpgrade openmpi4-testsuiteUpgrade pmixUpgrade mpich-ofi-develUpgrade libhdf5_hl_1_10_11-gnu-openmpi3-hpcUpgrade hdf5_1_10_11-gnu-openmpi3-hpc-devel-staticUpgrade openmpi_4_1_4-gnu-hpc-testsuiteUpgrade mvapich2Upgrade mvapich2_2_3_7-gnu-hpc-devel-staticUpgrade mvapich2_2_3_7-gnu-hpc-docUpgrade lua53-luaposixUpgrade mvapich2-psm2_2_3_7-gnu-hpcUpgrade hdf5-gnu-mpich-hpcUpgrade mpich-ofi_4_1_2-gnu-hpc-macros-develUpgrade openmpi_4_1_4-gnu-hpcUpgrade mpich-gnu-hpcUpgrade mpich-ofi_4_1_2-gnu-hpc-devel-staticUpgrade lua53-luatermUpgrade libhdf5hl_fortran_1_10_11-gnu-mpich-hpcUpgrade hdf5_1_10_11-gnu-openmpi4-hpc-devel-staticUpgrade libhdf5hl_fortran_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_hl-gnu-mvapich2-hpcUpgrade pmix-plugin-mungeUpgrade openmpi4-gnu-hpcUpgrade libhdf5_hl-gnu-openmpi4-hpcUpgrade libhdf5_cpp-gnu-hpcUpgrade luaposix-docUpgrade openmpi4-develUpgrade libhdf5_hl_1_10_11-gnu-hpcUpgrade hdf5_1_10_11-gnu-hpc-moduleUpgrade hdf5_1_10_11-gnu-openmpi3-hpc-moduleUpgrade pmix-develUpgrade libhdf5-gnu-openmpi3-hpcUpgrade mvapich2-psm_2_3_7-gnu-hpc-docUpgrade libhdf5_cpp-gnu-openmpi3-hpcUpgrade libhdf5-gnu-openmpi4-hpcUpgrade libhdf5_hl_1_10_11-gnu-openmpi1-hpcUpgrade libhdf5-gnu-mvapich2-hpcUpgrade mvapich2-gnu-hpc-macros-develUpgrade libhdf5_fortran-gnu-hpcUpgrade pmix-mca-paramsUpgrade hdf5_1_10_11-gnu-openmpi1-hpc-develUpgrade libhdf5-gnu-mpich-hpcUpgrade libhdf5_1_10_11-gnu-openmpi3-hpcUpgrade mvapich2-gnu-hpc-docUpgrade mpich-ofi_4_1_2-gnu-hpc-develUpgrade mpich-ofiUpgrade openmpi_4_1_4-gnu-hpc-devel-staticUpgrade hdf5_1_10_11-gnu-mpich-hpc-moduleUpgrade hdf5-gnu-mpich-hpc-develUpgrade libhdf5_hl_cpp-gnu-hpcUpgrade mvapich2-develUpgrade mvapich2-psm2_2_3_7-gnu-hpc-develUpgrade mvapich2-psm2-develUpgrade libhdf5_fortran-gnu-mpich-hpcUpgrade pmix-pluginsUpgrade hdf5_1_10_11-gnu-mvapich2-hpc-develUpgrade hdf5-hpc-examplesUpgrade hdf5-gnu-mvapich2-hpc-develUpgrade mvapich2-psm_2_3_7-gnu-hpc-macros-develUpgrade mvapich2-psm-gnu-hpc-macros-develUpgrade mvapich2-psm-gnu-hpc-docUpgrade mpich_4_1_2-gnu-hpc-macros-develUpgrade hdf5_1_10_11-gnu-mvapich2-hpc-moduleUpgrade hdf5-gnu-openmpi3-hpcUpgrade hdf5-gnu-mvapich2-hpcUpgrade libhdf5_hl-gnu-openmpi3-hpcUpgrade mpich_4_1_2-gnu-hpc-devel-staticUpgrade hdf5_1_10_11-gnu-openmpi4-hpc-moduleUpgrade mvapich2-psm2-gnu-hpcUpgrade openmpi_4_1_6-gnu-hpc-macros-develUpgrade hdf5-gnu-openmpi4-hpcUpgrade mvapich2-psm2_2_3_7-gnu-hpc-docUpgrade pmix-headersUpgrade openmpi4Upgrade mpichUpgrade libhdf5_hl_cpp_1_10_11-gnu-openmpi1-hpcUpgrade libhdf5_hl_cpp-gnu-mpich-hpcUpgrade mvapich2-gnu-hpc-develUpgrade libhdf5_hl-gnu-openmpi1-hpcUpgrade hdf5_1_10_11-gnu-hpc-develUpgrade openmpi_4_1_6-gnu-hpc-testsuiteUpgrade openmpi_4_1_6-gnu-hpcUpgrade openmpi4-libs-32bitUpgrade libhdf5_hl_fortran-gnu-openmpi1-hpcUpgrade libhdf5_hl_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_cpp_1_10_11-gnu-openmpi4-hpcUpgrade libhdf5_1_10_11-gnu-openmpi4-hpcUpgrade hdf5_1_10_11-gnu-openmpi1-hpcUpgrade hdf5_1_10_11-gnu-mpich-hpc-develUpgrade openmpi4-gnu-hpc-macros-develUpgrade mvapich2-psm2_2_3_7-gnu-hpc-macros-develUpgrade mvapich2-psm-docUpgrade mvapich2-docUpgrade mpich-ofi_4_0_2-gnu-hpc-macros-develUpgrade mpich-ofi-gnu-hpc-macros-develUpgrade libopenmpi4-gnu-hpcUpgrade hdf5_1_10_11-gnu-mpich-hpcUpgrade hdf5-gnu-hpc-develUpgrade pmix-testUpgrade lua51-luaposixUpgrade libhdf5_hl_cpp_1_10_11-gnu-mpich-hpcUpgrade hdf5_1_10_11-gnu-mvapich2-hpc-devel-staticUpgrade mvapich2-psm_2_3_7-gnu-hpcUpgrade mvapich2_2_3_7-gnu-hpc-macros-develUpgrade openmpi4-gnu-hpc-devel-staticUpgrade openmpi_4_1_4-gnu-hpc-macros-develUpgrade mvapich2-psm2Upgrade libopenmpi_4_1_6-gnu-hpcUpgrade libhdf5_cpp_1_10_11-gnu-mvapich2-hpcUpgrade mvapich2-psm-devel-staticUpgrade openmpi_4_1_6-gnu-hpc-develUpgrade openmpi_4_1_4-gnu-hpc-docsUpgrade mpich_4_0_2-gnu-hpc-devel-staticUpgrade mpich-ofi-gnu-hpcUpgrade libhdf5_fortran_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_cpp-gnu-mvapich2-hpcUpgrade libhdf5_1_10_11-gnu-mvapich2-hpcUpgrade hdf5_1_10_11-hpc-examplesUpgrade hdf5_1_10_11-gnu-openmpi4-hpc-develUpgrade mvapich2-psm_2_3_7-gnu-hpc-develUpgrade libhdf5_cpp_1_10_11-gnu-mpich-hpcUpgrade libhdf5_hl_cpp-gnu-openmpi4-hpcUpgrade libhdf5_cpp-gnu-mpich-hpcUpgrade mvapich2-psm_2_3_7-gnu-hpc-devel-staticUpgrade hdf5_1_10_11-gnu-mpich-hpc-devel-staticUpgrade mvapich2-psm2-gnu-hpc-develUpgrade mvapich2-psm2-docUpgrade mpich-ofi-gnu-hpc-develUpgrade libhdf5_1_10_11-gnu-hpcUpgrade mpich_4_0_2-gnu-hpcUpgrade hdf5_1_10_11-gnu-openmpi1-hpc-devel-staticUpgrade hdf5-gnu-hpcUpgrade openmpi_4_1_6-gnu-hpc-docsUpgrade hdf5_1_10_11-gnu-openmpi3-hpc-develUpgrade mpich_4_1_2-gnu-hpcUpgrade libhdf5_hl_cpp-gnu-openmpi3-hpcUpgrade libhdf5_fortran_1_10_11-gnu-openmpi3-hpcUpgrade libhdf5_fortran-gnu-mvapich2-hpcUpgrade libhdf5_cpp_1_10_11-gnu-openmpi3-hpcUpgrade hdf5_1_10_11-gnu-openmpi1-hpc-moduleUpgrade hdf5_1_10_11-gnu-hpcUpgrade hdf5-gnu-openmpi3-hpc-develUpgrade openmpi4-gnu-hpc-docsUpgrade openmpi4-docsUpgrade openmpi4-configUpgrade mpich-gnu-hpc-macros-develUpgrade libopenmpi_4_1_4-gnu-hpcUpgrade libhdf5_fortran_1_10_11-gnu-openmpi1-hpcUpgrade libhdf5_cpp-gnu-openmpi4-hpcUpgrade mvapich2-gnu-hpcUpgrade mpich-ofi_4_0_2-gnu-hpc-develUpgrade mpich-ofi_4_0_2-gnu-hpc-devel-staticUpgrade mpich-gnu-hpc-develUpgrade mpich-gnu-hpc-devel-staticUpgrade libhdf5_hl_fortran-gnu-openmpi3-hpcUpgrade mpich-develUpgrade libhdf5_hl_cpp_1_10_11-gnu-mvapich2-hpcUpgrade libhdf5_hl_fortran-gnu-hpcUpgrade libhdf5_hl-gnu-mpich-hpcUpgrade libhdf5_fortran-gnu-openmpi3-hpcUpgrade openmpi4-libsUpgrade openmpi_4_1_4-gnu-hpc-devel | Jun 21, 2024 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub