Skip to content
OpenAdvisories
Unscored USN-5272-1 3 CVEs

hdf5 vulnerabilities

Published Jul 20, 2022 · Updated Jun 29, 2026

Summary

It was discovered that HDF5 incorrectly handled certain inputs. An
attacker could possibly use this issue to cause a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS hdf5 1.8.11-5ubuntu7.1+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS hdf5 1.8.16+docs-4ubuntu1.1+esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS hdf5 1.10.0-patch1+docs-4ubuntu0.1~esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS hdf5 1.10.4+repack-11ubuntu1+esm1

Vulnerabilities 3

  • Unscored —

    A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10…

  • Unscored —

    Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attack…

  • Unscored —

    A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library durin…

References

  • report
    https://ubuntu.com/security/CVE-2018-17233
  • report
    https://ubuntu.com/security/CVE-2018-17234
  • report
    https://ubuntu.com/security/CVE-2018-17237