PT-2018-10396 · Hdf+3 · Hdf5+3

CVE-2018-11206 · Publicado 2018-05-16 · Atualizado 2023-08-09

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions HDF5 version 1.10.2

Description An out of bounds read was discovered in the H5O fill new decode and H5O fill old decode functions in the H5Ofill.c file of the HDF5 library. This issue could allow a remote denial of service or information disclosure attack.

Recommendations For HDF5 version 1.10.2, consider updating to a newer version that contains a fix for this issue, as using outdated library versions can pose security risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

BDU:2025-12515

CVE-2018-11206

DLA-3522-1

OPENSUSE-SU-2022_1912-1

SUSE-SU-2022:1903-1

SUSE-SU-2022:1910-1

SUSE-SU-2022:1911-1

SUSE-SU-2022:1912-1

SUSE-SU-2022:1933-1

SUSE-SU-2022_1912-1

Produtos afetados

Astra Linux

Debian

Hdf5

Suse

Referências · 155

• 🔥 https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md · Exploit
• 🔥 https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_h5d__select_io_h5dselect · Exploit
• 🔥 https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_apply_filters_h5repack_filters · Exploit
• 🔥 https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5 · Exploit
• https://github.com/SegfaultMasters/covering360/blob/master/HDF5/README.md#divided-by-zero---h5d__chunk_set_info_real_div_by_zero · Nota
• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln6#null-pointer-dereference-in-h5o_sdspace_encode · Nota
• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#invalid-write-memory-access-in-decompressc · Nota
• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln3#memory-leak---h5o__chunk_deserialize_memory_leak · Nota
• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln2#divided-by-zero---h5d__create_chunk_file_map_hyper_div_zero · Nota
• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln5#memory-leak-in-h5o_dtype_decode_helper · Nota
• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#heap-overflow-in-readgifimagedesc · Nota
• https://bdu.fstec.ru/vul/2023-07613 · Nota de Segurança
• https://security-tracker.debian.org/tracker/source-package/hdf5 · Aviso do Fabricante
• https://research.loginsoft.com/bugs/null-pointer-dereference-in-h5ac-c-hdf5-1-13-0 · Nota
• https://bugzilla.suse.com/1058563 · Nota