Description
The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | hdf5 | 1.10.0-patch1+docs-1 | — |
| Debian 13 | hdf5 | 1.10.0-patch1+docs-1 | — |
| Debian 12 | hdf5 | 1.10.0-patch1+docs-1 | — |
| Debian 8 | hdf5 | 1.8.13+docs-15+deb8u1 | DSA-3727-1 |
| Debian 7 | hdf5 | 1.8.8-9+deb7u1 | DLA-771-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | hdf5 | 1.8.16+docs-4ubuntu1.1 | — |
| Ubuntu 14.04 LTS | hdf5 | 1.8.11-5ubuntu7.1 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | hdf5_1_10_11-gnu-hpc +4 | 1.10.11-150400.3.12.1 | SUSE-SU-2024:0538-1 |
| SLES 12 | hdf5_1_10_11-gnu-hpc +2 | 1.10.11-3.21.1 | SUSE-SU-2024:0882-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE HPC 15 SP3 | adios_1_13_1-gnu-mpich-hpc +3 | 1.13.1-150300.12.4.2 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | hdf5_1_10_11-gnu-hpc +4 | 1.10.11-150300.4.16.15 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | netcdf_4_7_4-gnu-hpc +1 | 4.7.4-150300.4.7.19 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | netcdf_4_7_4-gnu-mvapich2-hpc | 4.7.4-150300.4.7.20 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | netcdf_4_7_4-gnu-openmpi3-hpc | 4.7.4-150300.4.7.17 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | netcdf_4_7_4-gnu-openmpi4-hpc | 4.7.4-150300.4.7.21 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | petsc | 3.14.5-150300.3.4.3 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | petsc_3_14_5-gnu-mpich-hpc +3 | 3.14.5-150300.3.4.4 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | trilinos_13_2_0-gnu-mpich-hpc +2 | 13.2.0-150300.3.12.18 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | trilinos_13_2_0-gnu-openmpi3-hpc | 13.2.0-150300.3.12.16 | SUSE-SU-2024:3144-1 |
| SLE HPC 15 SP3 | trilinos_13_2_0-hpc | 13.2.0-150300.3.12.9 | SUSE-SU-2024:3144-1 |
| SUSE Package Hub 12 | hdf5 | 1.8.17-5.1 | openSUSE-SU-2018:1056-1, openSUSE-SU-2018:1051-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | hdf5_1_10_11-gnu-hpc +4 | 1.10.11-150400.3.12.1 | SUSE-SU-2024:0538-1 |
Advisories 7
- DLA-771-1 hdf5 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3727-1 hdf5 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2024:0538-1 Security update for hdf5 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3144-1 Security update for hdf5, netcdf, trilinos SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2018:1056-1 Security update for hdf5 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0882-1 Security update for hdf5 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2018:1051-1 Security update for hdf5 SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 94417 vdb-entry
- GLSA-201701-13 vendor-advisory
- DSA-3727 vendor-advisory
- http://www.talosintelligence.com/reports/TALOS-2016-0178/