PT-2020-6976 · Hdf5+5 · Hdf5+5

Published 2020-03-22 · Updated 2024-09-12 · CVE-2020-10811

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions HDF5 versions through 1.12.0

Description The issue is related to a heap-based buffer over-read in the H5O layout decode() function located in H5Olayout.c. This can allow an attacker to cause a Denial of Service. The vulnerability is associated with a memory read outside the boundaries, which can be exploited to disrupt service.

Recommendations For versions through 1.12.0, consider disabling the H5O layout decode() function as a temporary workaround until a patch is available. Restrict access to the H5Olayout.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2024-2134

BDU:2024-07118

CVE-2020-10811

OESA-2023-1325

OESA-2023-1326

OESA-2023-1328

OPENSUSE-SU-2022_1912-1

SUSE-SU-2022:1903-1

SUSE-SU-2022:1910-1

SUSE-SU-2022:1911-1

SUSE-SU-2022:1912-1

SUSE-SU-2022:1933-1

Affected Products

Alt Linux

Astra Linux

Debian

Hdf5

Red Os

Suse

References · 111

• 🔥 https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_apply_filters_h5repack_filters · Exploit
• 🔥 https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_h5d__select_io_h5dselect · Exploit
• 🔥❌ https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2 · Exploit, Deleted
• 🔥 https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0 · Exploit
• 🔥 https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2020-10811 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8396 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-10811 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1933-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14460 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1911-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13867 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1903-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10811 · Vendor Advisory