CVE-2018-15671 PUBLISHED

An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5P__get_cb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.

EPSS 0.43% · 62.5th percentile

Risk Scores

EPSS Score
0.43%
62.5th percentile

Affected Products

VendorProductVersions
Ubuntu:25.10hdf51.14.5+repack-3build1, 0, 1.14.5+repack-3
Ubuntu:Pro:18.04:LTShdf50, 1.10.0-patch1+docs-4ubuntu0.1~esm2, 1.10.0-patch1+docs-4ubuntu0.1~esm1
Ubuntu:Pro:14.04:LTShdf51.8.11-5ubuntu7.1+esm1, 1.8.11-5ubuntu7.1+esm2, 1.8.11-5ubuntu2
Ubuntu:22.04:LTShdf51.10.6+repack-5, 0, 1.10.7+repack-4ubuntu1
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-11, 1.10.4+repack-11ubuntu1, 1.10.4+repack-11ubuntu1+esm1
Ubuntu:24.04:LTShdf51.10.10+repack-3.1ubuntu3, 1.10.10+repack-3.1ubuntu4, 0
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-4ubuntu1.1, 1.8.16+docs-4ubuntu1.1+esm2, 1.8.16+docs-4ubuntu1.1+esm1

Timeline

References

Open in Interactive Console →