# CVE-2017-17508: hdf5-helpers: In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a

CVE-2017-17508 is fixed in 8 products on 1 platform, first by hdf5-helpers 1.10.0-patch1+docs-4ubuntu0.1~esm1, released December 10, 2017. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2017-17508
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0122
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 10, 2017

## Description

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | hdf5-helpers Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [hdf5-helpers 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-hdf5-helpers-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | hdf5-tools Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [hdf5-tools 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-hdf5-tools-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | libhdf5-100 Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [libhdf5-100 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libhdf5-100-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | libhdf5-cpp-100 Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [libhdf5-cpp-100 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libhdf5-cpp-100-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | libhdf5-java Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [libhdf5-java 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libhdf5-java-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | libhdf5-jni Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [libhdf5-jni 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libhdf5-jni-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | libhdf5-mpich-100 Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [libhdf5-mpich-100 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libhdf5-mpich-100-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |
| Linux | libhdf5-openmpi-100 Ubuntu 18.04.6 LTS (bionic) | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | [libhdf5-openmpi-100 1.10.0-patch1+docs-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libhdf5-openmpi-100-1.10.0-patch1-docs-4ubuntu0.1-esm1.md) | Dec 10, 2017 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo