CVE-2017-17508
hdf5-helpers: In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a
CVE-2017-17508 is fixed in 8 products on 1 platform, first by hdf5-helpers 1.10.0-patch1+docs-4ubuntu0.1~esm1, released December 10, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0122
68th percentile
In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| hdf5-helpers · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | hdf5-helpers 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| hdf5-tools · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | hdf5-tools 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| libhdf5-100 · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | libhdf5-100 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| libhdf5-cpp-100 · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | libhdf5-cpp-100 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| libhdf5-java · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | libhdf5-java 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| libhdf5-jni · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | libhdf5-jni 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| libhdf5-mpich-100 · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | libhdf5-mpich-100 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |
| libhdf5-openmpi-100 · Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | libhdf5-openmpi-100 1.10.0-patch1+docs-4ubuntu0.1~esm1 | Dec 10, 2017 |