suse-hpc (SUSE:Linux Enterprise High Performance Computing 15-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15-LTSS package suse-hpc, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (27)

• CVE-2018-13869 — CVSS 9.8 (critical): An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c.
• CVE-2018-13870 — CVSS 9.8 (critical): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c.
• CVE-2017-17509 — CVSS 8.8 (high): In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example…
• CVE-2018-14460 — CVSS 8.8 (high): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in…
• CVE-2018-14033 — CVSS 8.8 (high): An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in…
• CVE-2018-11206 — CVSS 8.1 (high): An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could…
• CVE-2018-11207 — CVSS 6.5 (medium): A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of…
• CVE-2017-17505 — CVSS 6.5 (medium): In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example…
• CVE-2017-17506 — CVSS 6.5 (medium): In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Opline_pline_decode in H5Opline.c in libhdf5.a. For example…
• CVE-2017-17508 — CVSS 6.5 (medium): In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump…
• CVE-2018-11202 — CVSS 6.5 (medium): A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote…
• CVE-2018-11203 — CVSS 6.5 (medium): A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of…
• CVE-2018-11204 — CVSS 6.5 (medium): A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote…
• CVE-2018-17435 — CVSS 6.5 (medium): A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial…
• CVE-2018-17436 — CVSS 6.5 (medium): ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via…
• CVE-2018-17437 — CVSS 6.5 (medium): Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a…
• CVE-2018-17438 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse…
• CVE-2018-17233 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an…
• CVE-2018-17234 — CVSS 6.5 (medium): Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a…
• CVE-2018-17237 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse…
• CVE-2018-17432 — CVSS 6.5 (medium): A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a…
• CVE-2018-17433 — CVSS 6.5 (medium): A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial…
• CVE-2018-17434 — CVSS 6.5 (medium): A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted…
• CVE-2020-10811 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in…
• CVE-2020-10809 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c…
• CVE-2020-10810 — CVSS 5.5 (medium): An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It…
• CVE-2018-14032: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of…