Browse CVEs

HIGH 8.8 CVE-2018-16438 An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c. Hdf5 No fix yet Fix from $1,9502018-09-04 MEDIUM 6.5 CVE-2018-15671 An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c durin… Hdf5 No fix yet Fix from $1,6002018-08-21 HIGH 8.8 CVE-2018-14460 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c. Hdf5 Mitigation only Fix from $1,9502018-07-20 HIGH 8.8 CVE-2018-14031 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c. Hdf5 Mitigation only Fix from $1,9502018-07-13 HIGH 8.8 CVE-2018-14033 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, rela… Hdf5 Mitigation only Fix from $1,9502018-07-13 HIGH 8.8 CVE-2018-14034 An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c. Hdf5 Mitigation only Fix from $1,9502018-07-13 HIGH 8.8 CVE-2018-14035 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c. Hdf5 Mitigation only Fix from $1,9502018-07-13 CRITICAL 9.8 CVE-2018-13866 An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5F_addr_decode_len in H5Fint.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13867 An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13868 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13869 An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13870 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13871 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13872 An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5G_ent_decode in H5Gent.c. Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13874 An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related … Hdf5 No fix yet Fix from $2,3002018-07-10 CRITICAL 9.8 CVE-2018-13876 An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c, related … Hdf5 No fix yet Fix from $2,3002018-07-10 HIGH 7.8 CVE-2018-13875 An issue was discovered in the HDF HDF5 1.8.20 library. There is an out-of-bounds read in the function H5VM_memcpyvv in H5VM.c. Hdf5 No fix yet Fix from $1,9502018-07-10 HIGH 8.1 CVE-2018-11205 A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or informati… Hdf5 No fix yet Fix from $1,9502018-05-16 HIGH 8.1 CVE-2018-11206 An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a rem… Hdf5 No fix yet Fix from $1,9502018-05-16 MEDIUM 6.5 CVE-2018-11202 A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of ser… Hdf5 No fix yet Fix from $1,6002018-05-16 MEDIUM 6.5 CVE-2018-11203 A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service at… Hdf5 No fix yet Fix from $1,6002018-05-16 MEDIUM 6.5 CVE-2018-11204 A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of s… Hdf5 No fix yet Fix from $1,6002018-05-16 MEDIUM 6.5 CVE-2018-11207 A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. Hdf5 No fix yet Fix from $1,6002018-05-16 HIGH 8.8 CVE-2017-17509 In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, h5dump wou… Hdf5 Mitigation only Fix from $1,9502017-12-11 MEDIUM 6.5 CVE-2017-17505 In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would c… Hdf5 Mitigation only Fix from $1,6002017-12-11 MEDIUM 6.5 CVE-2017-17507 In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would… Hdf5 No fix yet Fix from $1,6002017-12-11 MEDIUM 6.5 CVE-2017-17508 In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash w… Hdf5 Mitigation only Fix from $1,6002017-12-11 HIGH 8.6 CVE-2016-4333 The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing… Hdf5 No fix yet Fix from $1,9502016-11-18 HIGH 8.6 CVE-2016-4332 The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative … Hdf5 No fix yet Fix from $1,9502016-11-18 HIGH 8.6 CVE-2016-4331 When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the … Hdf5 No fix yet Fix from $1,9502016-11-18