CVE-2018-13874: Buffer Overflow
Published Jul 10, 2018
·Updated
An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FDsec2read in H5FDsec2.c, related to HDmemset.
Affected Software
1 affected component
HDFGroup hdf5=1.8.20
Event History
Jul 10, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-13874?
CVE-2018-13874 is classified as a high severity vulnerability due to its potential for exploitation through a stack-based buffer overflow.
2
How do I fix CVE-2018-13874?
To fix CVE-2018-13874, upgrade to a patched version of the HDF5 library that addresses the buffer overflow issue.
3
Which versions of HDF5 are affected by CVE-2018-13874?
CVE-2018-13874 specifically affects version 1.8.20 of the HDF5 library.
4
How can CVE-2018-13874 be exploited?
CVE-2018-13874 can be exploited by attackers through crafted input that triggers the stack-based buffer overflow in the H5FD_sec2_read function.
5
Is CVE-2018-13874 present in later versions of HDF5?
CVE-2018-13874 has been addressed in later versions of the HDF5 library, so it is not present in those updates.