CVE-2019-8396: Buffer Overflow
A buffer overflow in H5Olayoutencode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-8396?
CVE-2019-8396 is classified as a high severity vulnerability due to the potential for denial of service attacks.
How do I fix CVE-2019-8396?
To fix CVE-2019-8396, upgrade HDF5 to the latest version beyond 1.10.4 where the vulnerability has been addressed.
What impact does CVE-2019-8396 have on my system?
CVE-2019-8396 allows an attacker to induce a denial of service by exploiting a buffer overflow when processing crafted HDF5 files.
Which versions are affected by CVE-2019-8396?
CVE-2019-8396 affects all versions of HDF5 up to and including 1.10.4.
How can I identify if I am vulnerable to CVE-2019-8396?
To determine if you are vulnerable to CVE-2019-8396, check if your installation of HDF5 is version 1.10.4 or earlier.