CVE-2018-17237 PUBLISHED

A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.

EPSS 0.14% · 33.5th percentile

Risk Scores

EPSS Score
0.14%
33.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-3, 1.8.16+docs-1, 1.8.16+docs-2
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4ubuntu0.1~esm1, 1.10.0-patch1+docs-4, 0
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-11ubuntu1, 0, 1.10.4+repack-10
Ubuntu:Pro:14.04:LTShdf51.8.11-5ubuntu6, 1.8.11-5ubuntu2, 1.8.11-5ubuntu1

Timeline

References

Open in Interactive Console →