CVE-2017-17506: Medium severity hdf5 vulnerability
Published Dec 11, 2017
·Updated
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.
Affected Software
2 affected components
HDFGroup hdf5=1.10.1
HDFGroup hdf5>=1.8.0<=1.10.1
Event History
Dec 11, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17506?
CVE-2017-17506 has a medium severity rating due to its potential for causing application crashes.
2
How do I fix CVE-2017-17506?
To mitigate CVE-2017-17506, users should upgrade to a patched version of HDF5 that addresses this vulnerability.
3
Which versions of HDF5 are affected by CVE-2017-17506?
CVE-2017-17506 affects HDF5 version 1.10.1 and versions from 1.8.0 up to, but not including, 1.10.1.
4
What type of vulnerability is CVE-2017-17506?
CVE-2017-17506 is classified as an out of bounds read vulnerability.
5
What could happen if CVE-2017-17506 is exploited?
Exploitation of CVE-2017-17506 can lead to application crashes when processing crafted HDF5 files.