CVE-2018-17233: Divide by Zero
A SIGFPE signal is raised in the function H5Dcreatechunkfilemaphyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17233?
CVE-2018-17233 is classified as a denial of service vulnerability due to a division by zero error.
How do I fix CVE-2018-17233?
To fix CVE-2018-17233, update the HDF5 library to version 1.10.4 or later.
What causes the CVE-2018-17233 vulnerability?
CVE-2018-17233 is caused by inadequate checks against division by zero in the H5D__create_chunk_file_map_hyper() function.
Who is affected by CVE-2018-17233?
Any user or application utilizing HDF5 versions up to 1.10.3 is affected by CVE-2018-17233.
What type of attack can CVE-2018-17233 enable?
CVE-2018-17233 can enable a remote denial of service attack through crafted HDF files.