CVE-2018-14033: High severity hdf5 vulnerability
Published Jul 13, 2018
·Updated
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy.
Affected Software
1 affected component
HDFGroup hdf5=1.8.20
Event History
Jul 13, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14033?
CVE-2018-14033 has been classified as a high severity vulnerability due to its potential to cause heap-based buffer over-read.
2
How do I fix CVE-2018-14033?
To remediate CVE-2018-14033, update the HDF5 library to a version later than 1.8.20 that addresses this vulnerability.
3
Which versions are affected by CVE-2018-14033?
CVE-2018-14033 specifically affects the HDF5 library version 1.8.20.
4
What type of vulnerability is CVE-2018-14033?
CVE-2018-14033 is categorized as a heap-based buffer over-read vulnerability.
5
In which function does the CVE-2018-14033 vulnerability occur?
The CVE-2018-14033 vulnerability occurs in the function H5O_layout_decode within the file H5Olayout.c.