CVE-2020-18494 PUBLISHED

Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.

EPSS 0.89% · 75.4th percentile

Risk Scores

EPSS Score
0.89%
75.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTShdf50, 1.10.4+repack-10, 1.10.4+repack-11
Ubuntu:Pro:18.04:LTShdf51.10.0-patch1+docs-4ubuntu0.1~esm2, 0, 1.10.0-patch1+docs-4
Ubuntu:22.04:LTShdf50, 1.10.6+repack-5, 1.10.7+repack-4ubuntu1
Ubuntu:Pro:16.04:LTShdf51.8.16+docs-2, 1.8.16+docs-3, 1.8.16+docs-3ubuntu1
Ubuntu:Pro:14.04:LTShdf50, 1.8.11-3ubuntu1, 1.8.11-5ubuntu1
Ubuntu:24.04:LTShdf50, 1.10.8+repack1-1ubuntu1, 1.10.10+repack-3ubuntu1

Timeline

References

Open in Interactive Console →