MEDIUM
hdf5: SIGFPE signal in apply_filters() in h5repack_filters.c
Published Sep 24, 2018
6.5
MEDIUMCVSS 3.0
EPSS 1.76%
Description
A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
Affected products
No data.
No data.
Red Hat OpenStack Platform 10 (Newton)
hdf5
Fix deferred
Red Hat OpenStack Platform 12 (Pike)
hdf5
Affected
Red Hat OpenStack Platform 13 (Queens)
hdf5
Fix deferred
Red Hat OpenStack Platform 14 (Rocky)
hdf5
Fix deferred
Red Hat OpenStack Platform 8 (Liberty)
hdf5
Fix deferred
Red Hat OpenStack Platform 9 (Mitaka)
hdf5
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat OpenStack Platform 10 (Newton) | hdf5 | Fix deferred | n/a |
| Red Hat OpenStack Platform 12 (Pike) | hdf5 | Affected | n/a |
| Red Hat OpenStack Platform 13 (Queens) | hdf5 | Fix deferred | n/a |
| Red Hat OpenStack Platform 14 (Rocky) | hdf5 | Fix deferred | n/a |
| Red Hat OpenStack Platform 8 (Liberty) | hdf5 | Fix deferred | n/a |
| Red Hat OpenStack Platform 9 (Mitaka) | hdf5 | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- https://access.redhat.com/security/cve/CVE-2018-17434 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1634121 Issue Tracking
- https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_apply_filters_h5repack_filters ExploitThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2018-17434
- https://www.cve.org/CVERecord?id=CVE-2018-17434
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 24, 2018
Updated Aug 5, 2024
Reserved Sep 24, 2018
Link CVE-2018-17434
CISA Vulnrichment
Updated n/a