PT-2022-7545 · Hdf5+2 · Hdf5+2
Published
2022-08-22
·
Updated
2026-03-29
·
CVE-2024-29165
CVSS v3.1
7.4
High
| Vector | AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HDF5 versions prior to 1.14.4
Description
The issue is related to a buffer overflow in the
H5Z filter fletcher32() function of the HDF5 library, which can lead to corruption of the instruction pointer. This can cause denial of service or potentially allow for code execution, impacting the confidentiality, integrity, and availability of protected information.Recommendations
For HDF5 versions prior to 1.14.4, update to version 1.14.4 or later to resolve the issue.
As a temporary workaround, consider disabling the
H5Z filter fletcher32() function until a patch is available.Fix
DoS
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Hdf5
Red Os