PT-2018-3947 · Hdf+4 · Hdf5+4
Published
2018-09-20
·
Updated
2023-08-09
·
CVE-2018-17233
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
HDF5 versions 1.10.3 and earlier
Description
A SIGFPE signal is raised in the function
H5D create chunk file map hyper() of H5Dchunk.c during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.Recommendations
For versions 1.10.3 and earlier, consider updating to a version that fixes the division by zero issue in the
H5D create chunk file map hyper() function. As a temporary workaround, consider restricting the use of crafted HDF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Hdf5
Linuxmint
Suse
Ubuntu