CVE-2018-15671: Medium severity hdf5 vulnerability
Published Aug 21, 2018
·Updated
An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been detected in the function H5Pgetcb() in H5Pint.c during an attempted parse of a crafted HDF file. This results in denial of service.
Affected Software
1 affected component
HDFGroup hdf5=1.10.2
Event History
Aug 21, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-15671?
CVE-2018-15671 has a high severity level due to the potential for denial of service attacks.
2
How do I fix CVE-2018-15671?
To fix CVE-2018-15671, upgrade to a later version of the HDF5 library that has addressed the stack consumption issue.
3
What is the impact of CVE-2018-15671?
The impact of CVE-2018-15671 is denial of service resulting from excessive stack consumption when parsing crafted HDF files.
4
Which versions of HDF5 are affected by CVE-2018-15671?
CVE-2018-15671 specifically affects HDF5 version 1.10.2.
5
How can CVE-2018-15671 be exploited?
CVE-2018-15671 can be exploited by providing a specially crafted HDF file that triggers excessive stack consumption.