First published: Wed May 16 2018(Updated: )
A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HDF5 | =1.10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2018-11202 is considered to be high due to its potential to cause remote denial of service.
To fix CVE-2018-11202, upgrade to a version of the HDF5 library beyond 1.10.2 that addresses this vulnerability.
CVE-2018-11202 can lead to a denial of service attack, causing affected systems to crash or become unresponsive.
CVE-2018-11202 primarily allows for remote exploitation, meaning attackers typically do not need local access to exploit the vulnerability.
CVE-2018-11202 affects HDF5 library version 1.10.2 and earlier versions.