PT-2018-14026
CVE-2018-17432
·
Published
2018-09-24
·
Updated
2026-10-31
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
HDF5 versions prior to 1.10.4
Description
A NULL pointer dereference issue exists in the H5O sdspace encode() function, located in the H5Osdspace.c file of the HDF5 library. This issue allows attackers to cause a denial of service by providing a crafted HDF5 file.
Recommendations
For versions prior to 1.10.4, update to version 1.10.4 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾