CVE-2019-9152: High severity HDFGroup hdf5 vulnerability
Published Feb 25, 2019
·Updated
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MMxstrdup in H5MM.c when called from H5Odtypedecodehelper in H5Odtype.c.
Affected Software
1 affected component
HDFGroup hdf5=1.10.4
Event History
Feb 25, 2019
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-9152?
CVE-2019-9152 has been rated as a high severity vulnerability due to its potential to expose sensitive data through an out of bounds read.
2
How do I fix CVE-2019-9152?
To fix CVE-2019-9152, upgrade the HDF5 library to version 1.10.5 or later where the vulnerability has been addressed.
3
What impact does CVE-2019-9152 have on software using HDF5 1.10.4?
CVE-2019-9152 may allow attackers to read out of bounds memory, potentially leading to information disclosure.
4
Is CVE-2019-9152 a local or remote vulnerability?
CVE-2019-9152 is primarily a local vulnerability, as it affects how the HDF5 library handles certain data in memory.
5
Who is affected by CVE-2019-9152?
Users and applications utilizing HDF5 version 1.10.4 are affected by CVE-2019-9152.