Risk | High |
Patch available | YES |
Number of vulnerabilities | 14 |
CVE-ID | CVE-2018-11206 CVE-2018-14033 CVE-2018-14460 CVE-2018-17234 CVE-2018-17237 CVE-2018-17432 CVE-2018-17433 CVE-2018-17434 CVE-2018-17436 CVE-2018-17437 CVE-2018-17438 CVE-2020-10809 CVE-2020-10810 CVE-2020-10811 |
CWE-ID | CWE-125 CWE-400 CWE-369 CWE-476 CWE-122 CWE-787 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software |
SUSE Linux Enterprise Module for HPC Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system SUSE Linux Enterprise Module for Packagehub Subpackages Operating systems & Components / Operating system package or component hdf5-hpc-examples Operating systems & Components / Operating system package or component hdf5-gnu-openmpi4-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5-gnu-openmpi3-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component hdf5-gnu-mvapich2-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component hdf5-gnu-mpich-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-mpich-hpc Operating systems & Components / Operating system package or component hdf5-gnu-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-hpc Operating systems & Components / Operating system package or component |
Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 14 vulnerabilities.
EUVDB-ID: #VU37128
Risk: High
CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2018-11206
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to #BASIC_IMPACT#.
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU36907
Risk: High
CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2018-14033
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy. A remote attacker can perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU36838
Risk: High
CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2018-14460
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c. A remote attacker can perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63931
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17234
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5. A remote attacker can trick the victim into opening a specially crafted HDF5 file and perform a denial of service attack.
Update the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63932
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17237
CWE-ID:
CWE-369 - Divide By Zero
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to a division by zero error in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5. A remote attacker can trick the victim into opening a specially crafted HDF file and perform a denial of service attack.
Update the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63934
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17432
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5. A remote attacker can trick the victim into opening specially crafted HDF5 file and perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63935
Risk: Medium
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17433
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to a boundary error in ReadGifImageDesc() in gifread.c in the HDF HDF5 when converting a GIF file to an HDF file. A remote attacker can trick the victim into opening a specially crafted HDF5 file and perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63937
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17434
CWE-ID:
CWE-369 - Divide By Zero
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to a division by zero error in the function apply_filters() of h5repack_filters.c in the HDF HDF5. A remote attacker can trick the victim into opening specially crafted HDF file and perform a denial of service attack.
Update the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63940
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17436
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to a boundary error in the ReadCode() function in decompress.c in the HDF HDF5. A remote attacker can trick the victim into opening specially crafted HDF file, trigger out-of-bounds write, and perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63941
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17437
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5. A remote attacker can trick the victim into opening a specially crafted HDF5 file and perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63943
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2018-17438
CWE-ID:
CWE-369 - Divide By Zero
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to a division by zero error in the H5D__select_io() function of H5Dselect.c in the HDF HDF5. A remote attacker can trick the victim into opening a specially crafted HDF file and perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU26294
Risk: Low
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-10809
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the Decompress() function in decompress.c. A remote attacker can exploit the vulnerability by sending a crafted file to the gif2h5 binary, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU26293
Risk: Low
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-10810
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the H5AC_unpin_entry() function located in H5AC.c. It allows an attacker to cause Denial of Service. A remote attacker can perform a denial of service (DoS) attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU26295
Risk: Low
CVSSv4.0: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-10811
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in the H5O__layout_decode() function in H5Olayout.c. A remote attacker can pass specially crafted data to the application, trigger out-of-bounds read error and read contents of memory on the system or perform a denial of service attack.
MitigationUpdate the affected package hdf5 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for HPC: 15-SP3
openSUSE Leap: 15.3 - 15.4
SUSE Manager Server: 4.2
SUSE Manager Proxy: 4.2
SUSE Linux Enterprise Server for SAP Applications: 15-SP3
SUSE Linux Enterprise Server: 15-SP3
SUSE Linux Enterprise High Performance Computing: 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages: 15-SP3
hdf5-hpc-examples: before 1.10.8-150300.4.3.1
hdf5-gnu-openmpi4-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-mvapich2-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc-devel: before 1.10.8-150300.4.3.2
hdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
hdf5-gnu-hpc-devel: before 1.10.8-150300.4.3.1
hdf5-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_hl-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_hl-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi4-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-mvapich2-hpc: before 1.10.8-150300.4.3.1
libhdf5-gnu-mpich-hpc: before 1.10.8-150300.4.3.2
libhdf5-gnu-hpc: before 1.10.8-150300.4.3.1
CPE2.3https://www.suse.com/support/update/announcement/2022/suse-su-20221912-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.