PT-2018-3947 · Hdf+4 · Hdf5+4
Publicado
2018-09-20
·
Atualizado
2023-08-09
·
CVE-2018-17233
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
HDF5 versions 1.10.3 and earlier
Description
A SIGFPE signal is raised in the function
H5D create chunk file map hyper() of H5Dchunk.c during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.Recommendations
For versions 1.10.3 and earlier, consider updating to a version that fixes the division by zero issue in the
H5D create chunk file map hyper() function. As a temporary workaround, consider restricting the use of crafted HDF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Hdf5
Linuxmint
Suse
Ubuntu