CVE-2018-17233 PUBLISHED

A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.

EPSS 0.27% · 50.6th percentile

Risk Scores

EPSS Score
0.27%
50.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-11ubuntu1, 1.10.4+repack-11, 1.10.4+repack-10
Ubuntu:Pro:14.04:LTShdf51.8.11-5ubuntu7, 1.8.11-5ubuntu7.1, 1.8.11-5ubuntu7.1+esm1
Ubuntu:Pro:16.04:LTShdf5*, 1.8.16+docs-3ubuntu1, 1.8.16+docs-4ubuntu1
Ubuntu:Pro:18.04:LTShdf50, 1.10.0-patch1+docs-4, 1.10.0-patch1+docs-4ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →