CVE-2019-8396 PUBLISHED

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."

EPSS 0.48% · 65.0th percentile

Risk Scores

EPSS Score
0.48%
65.0th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTShdf51.10.6+repack-5, 1.10.7+repack-4ubuntu2, 1.10.7+repack-4ubuntu1
Ubuntu:Pro:18.04:LTShdf50, 1.10.0-patch1+docs-4, 1.10.0-patch1+docs-4ubuntu0.1~esm1
Ubuntu:24.04:LTShdf51.10.8+repack1-1ubuntu1, 1.10.10+repack-3.1ubuntu4, 1.10.10+repack-3.1ubuntu3
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-4ubuntu1.1+esm1, 0, 1.8.15-patch1+docs-4
Ubuntu:Pro:14.04:LTShdf51.8.11-3ubuntu1, 1.8.11-5ubuntu7.1, 1.8.11-5ubuntu7
Ubuntu:Pro:20.04:LTShdf51.10.4+repack-10, 1.10.4+repack-11, 1.10.4+repack-11ubuntu1

Timeline

References

Open in Interactive Console →