CVE-2018-17438 PUBLISHED

A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.

EPSS 0.36% · 57.8th percentile

Risk Scores

EPSS Score
0.36%
57.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-4ubuntu1.1+esm2, 1.8.15-patch1+docs-5, 1.8.16+docs-1
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-11ubuntu1+esm1, 1.10.4+repack-11ubuntu1, 1.10.4+repack-11
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4ubuntu0.1~esm2, 1.10.0-patch1+docs-4ubuntu0.1~esm1, 1.10.0-patch1+docs-4
Ubuntu:22.04:LTShdf51.10.7+repack-4ubuntu2, 0, 1.10.6+repack-5
Ubuntu:Pro:14.04:LTShdf51.8.11-5ubuntu7, 1.8.11-5ubuntu6, 1.8.11-5ubuntu2

Timeline

References

Open in Interactive Console →