CVE-2017-17507 PUBLISHED

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt in H5Tconv.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

EPSS 0.15% · 35.0th percentile

Risk Scores

EPSS Score
0.15%
35.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4ubuntu0.1~esm2, 1.10.0-patch1+docs-4ubuntu0.1~esm1, 1.10.0-patch1+docs-4
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-10, 0, 1.10.4+repack-11ubuntu1+esm1
Ubuntu:22.04:LTShdf50, 1.10.6+repack-5, 1.10.7+repack-4ubuntu1
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-2, 1.8.16+docs-3, 1.8.16+docs-3ubuntu1
Ubuntu:24.04:LTShdf51.10.10+repack-3.1ubuntu4, 0, 1.10.8+repack1-1ubuntu1
Ubuntu:Pro:14.04:LTShdf51.8.11-5ubuntu6, 1.8.11-5ubuntu2, 1.8.11-5ubuntu1

Timeline

References

Open in Interactive Console →