SUSE-SU-2022:3825-1: hdf5_1_10_8-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2022:3825-1 is a vulnerability in hdf5_1_10_8-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4 SUSE Linux Enterprise with no CVSS score yet.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 11 · Downstream 0 · Related 11Timeline
- 01-11-2022PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for hdf5 This update for hdf5 fixes the following issues: - CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215). - CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906). - CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069). - CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400). - CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375). - CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882). - CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663). - CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212). - CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366). - CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475). - CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Suse10 products
- hdf5_1_10_8-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4< 1.10.8-150400.3.3.1
- hdf5_1_10_8-gnu-hpc&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4< 1.10.8-150400.3.3.1
- hdf5_1_10_8-gnu-mpich-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4< 1.10.8-150400.3.3.1
- hdf5_1_10_8-gnu-mpich-hpc&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4< 1.10.8-150400.3.3.1
- hdf5_1_10_8-gnu-mvapich2-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4< 1.10.8-150400.3.3.1
1 vendor · 10 products