CVE-2018-17435: Medium severity hdf5 vulnerability
Published Sep 24, 2018
·Updated
A heap-based buffer over-read in H5Oattrdecode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file.
Affected Software
1 affected component
HDFGroup hdf5<=1.10.3
Event History
Sep 24, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17435?
CVE-2018-17435 is classified as a high-severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2018-17435?
To mitigate CVE-2018-17435, you should upgrade HDF5 to a version higher than 1.10.3.
3
What type of attack can exploit CVE-2018-17435?
CVE-2018-17435 can be exploited by attackers through crafted HDF5 files to perform a denial of service.
4
What does CVE-2018-17435 affect?
CVE-2018-17435 affects the HDF5 library versions up to and including 1.10.3.
5
How is CVE-2018-17435 triggered?
CVE-2018-17435 is triggered when processing a specially crafted HDF5 file, especially during conversion to other formats like GIF.