Buffer Overflow Vulnerability in HDF5 Package Leading to Potential Code Execution
Summary
DEBIAN-CVE-2024-29159: HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. Affects hdf5 versions < 1.14.5+repack-1. Fixed in 1.14.5+repack-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
HDF5 is a widely used file format and set of tools for managing complex data. It is designed to store and organize large amounts of data efficiently. The HDF5 library provides a rich set of features, including support for various data types and the ability to handle large datasets. However, certain versions of HDF5 are vulnerable to a buffer overflow issue that can compromise system integrity.
Vulnerability Detail
The vulnerability identified as DEBIAN-CVE-2024-29159 affects HDF5 versions up to 1.14.3. It is caused by a buffer overflow in the H5Z__filter_scaleoffset function. This flaw can lead to the corruption of the instruction pointer, resulting in a denial of service or potential arbitrary code execution. Attackers could exploit this vulnerability to execute malicious code on affected systems, posing significant security risks.
How To Fix
Minimum fixed version
1.14.5+repack-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade hdf5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the affected features of the HDF5 library until the package is updated. However, it is strongly recommended to apply the patch as soon as possible to mitigate risks.
Conclusion
The buffer overflow vulnerability in HDF5 poses serious security risks, including potential code execution. Users are advised to update to the patched version to safeguard their systems. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for hdf5 →
FAQ
The vulnerability is a buffer overflow that can lead to denial of service or potential code execution.
HDF5 versions up to 1.14.3 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Update the HDF5 package to version 1.14.5+repack-1 to secure your system against this vulnerability.
Vulert monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json, providing real-time insights into potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for hdf5.
