PT-2019-19010 · Hdf+3 · Hdf5+3
Godlovevampire
·
Published
2019-02-17
·
Updated
2026-03-29
·
CVE-2019-8396
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
HDF5 versions prior to 1.10.5
Description
A buffer overflow issue in the HDF5 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file.
Recommendations
For versions prior to 1.10.5, update to version 1.10.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HDF5 files that may trigger the buffer overflow. Restrict access to sensitive areas where such files may be processed to minimize the risk of exploitation.
Exploit
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Hdf5
Suse