hdf5_1_10_8-gnu-openmpi2-hpc (SUSE:Linux Enterprise High Performance Computing 15-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15-LTSS package hdf5_1_10_8-gnu-openmpi2-hpc, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (38)

• CVE-2018-13869 — CVSS 9.8 (critical): An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c.
• CVE-2018-13870 — CVSS 9.8 (critical): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
• CVE-2018-13867 — CVSS 9.8 (critical): An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.
• CVE-2021-46242 — CVSS 8.8 (high): HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.
• CVE-2018-14033 — CVSS 8.8 (high): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in…
• CVE-2018-16438 — CVSS 8.8 (high): An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
• CVE-2018-14460 — CVSS 8.8 (high): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in…
• CVE-2017-17509 — CVSS 8.8 (high): In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example…
• CVE-2018-14031 — CVSS 8.8 (high): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
• CVE-2018-11205 — CVSS 8.1 (high): A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or…
• CVE-2018-11206 — CVSS 8.1 (high): An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could…
• CVE-2018-17433 — CVSS 6.5 (medium): A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial…
• CVE-2018-17434 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted…
• CVE-2018-17435 — CVSS 6.5 (medium): A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial…
• CVE-2018-17436 — CVSS 6.5 (medium): ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via…
• CVE-2018-17437 — CVSS 6.5 (medium): Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a…
• CVE-2018-17438 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse…
• CVE-2018-17439 — CVSS 6.5 (medium): An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in…
• CVE-2019-8396 — CVSS 6.5 (medium): A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service…
• CVE-2021-46244 — CVSS 6.5 (medium): A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This vulnerability…
• CVE-2017-17506 — CVSS 6.5 (medium): In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example…
• CVE-2017-17508 — CVSS 6.5 (medium): In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump…
• CVE-2018-11202 — CVSS 6.5 (medium): A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote…
• CVE-2018-11203 — CVSS 6.5 (medium): A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of…
• CVE-2018-11204 — CVSS 6.5 (medium): A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote…
• CVE-2018-11207 — CVSS 6.5 (medium): A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of…
• CVE-2018-17233 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an…
• CVE-2018-17234 — CVSS 6.5 (medium): Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a…
• CVE-2018-17237 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse…
• CVE-2018-17432 — CVSS 6.5 (medium): A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a…
• CVE-2017-17505 — CVSS 6.5 (medium): In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example…
• CVE-2021-45830 — CVSS 5.5 (medium): A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a…
• CVE-2020-10811 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in…
• CVE-2020-10812 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It…
• CVE-2020-10810 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It…
• CVE-2021-45833 — CVSS 5.5 (medium): A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in…
• CVE-2020-10809 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c…
• CVE-2018-14032: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of…