CVE-2018-17435 PUBLISHED

A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file.

EPSS 0.76% · 73.1th percentile

Risk Scores

EPSS Score
0.76%
73.1th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTShdf50, 1.8.11-3ubuntu1, 1.8.11-5ubuntu1
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-11ubuntu1+esm1, 0, 1.10.4+repack-10
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4, 1.10.0-patch1+docs-4ubuntu0.1~esm1, 1.10.0-patch1+docs-4ubuntu0.1~esm2
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-4ubuntu1.1, 1.8.16+docs-4ubuntu1.1+esm1, 1.8.16+docs-4ubuntu1.1+esm2

Timeline

References

Open in Interactive Console →