CVE-2018-17434: Divide by Zero
A SIGFPE signal is raised in the function applyfilters() of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17434?
CVE-2018-17434 has a severity level that may lead to remote denial of service due to a SIGFPE signal from division by zero.
How do I fix CVE-2018-17434?
To fix CVE-2018-17434, upgrade to the latest version of the HDF5 library beyond 1.10.3.
What causes the CVE-2018-17434 vulnerability?
CVE-2018-17434 is caused by improper handling of division by zero during the parsing of a crafted HDF file.
What systems are affected by CVE-2018-17434?
CVE-2018-17434 affects the HDF5 library versions up to and including 1.10.3.
Is CVE-2018-17434 a local or remote vulnerability?
CVE-2018-17434 is a remote vulnerability that can be exploited through crafted HDF file uploads.