CVE-2018-13870 PUBLISHED

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.

EPSS 0.55% · 67.8th percentile

Risk Scores

EPSS Score
0.55%
67.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-1, 1.8.16+docs-2, 1.8.16+docs-3
Ubuntu:Pro:14.04:LTShdf50, 1.8.11-3ubuntu1, 1.8.11-5ubuntu1
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-11ubuntu1+esm1, 0, 1.10.4+repack-10
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4, 1.10.0-patch1+docs-4ubuntu0.1~esm1, 1.10.0-patch1+docs-4ubuntu0.1~esm2

Timeline

References

Open in Interactive Console →