PT-2018-13132
CVE-2018-15671
·
Published
2018-08-21
·
Updated
2018-10-16
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
HDF5 version 1.10.2
Description
An issue in the HDF5 library can cause excessive stack consumption in the function H5P get cb() during the parsing of a crafted HDF file, resulting in denial of service.
Recommendations
For version 1.10.2, consider updating to a newer version that addresses this issue, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾