Heap-buffer-overflow in H5O__chunk_protect in hdf5
Summary
OSV-2023-754: Heap-buffer-overflow in H5O__chunk_protect. Affects hdf5 across 4 version ranges.
>= 04f0647727677d716a3c1c772d35a660a8ea0dc5
>= 5a0ec52099cf02224a4066b158bcf1a34829db20
>= 966454aac1231da7209ef81c11055d3312181f99
>= f527239564fc27a6e666ce734b88e4ab18765efc, < 589f5238feae51787d3925fba0cb39b1cbabf8d5
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
HDF5 is a data model, library, and file format for storing and managing large amounts of numerical data. It is commonly used in scientific and engineering applications. The H5O__chunk_protect function in the HDF5 library is responsible for protecting a chunk of data in memory. However, a heap-buffer-overflow vulnerability has been discovered in this function.
Vulnerability Detail
The heap-buffer-overflow vulnerability in H5O__chunk_protect can lead to a read of 8 bytes beyond the bounds of a buffer. This can result in a crash or potentially allow an attacker to execute arbitrary code. The vulnerability has been reported through the OSS-Fuzz project and can be triggered by manipulating certain input data. The affected versions of the HDF5 package include those introduced in commits 966454aac1231da7209ef81c11055d3312181f99, 04f0647727677d716a3c1c772d35a660a8ea0dc5, 5a0ec52099cf02224a4066b158bcf1a34829db20, and f527239564fc27a6e666ce734b88e4ab18765efc.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can mitigate the risk by avoiding the use of the affected functionality or by implementing input validation to prevent the manipulation of data that triggers the vulnerability. Here is an example of input validation code:
if (input_data_size <= MAX_ALLOWED_SIZE) {
// Process the input data
} else {
// Handle the error or reject the input
}
Conclusion
In conclusion, a heap-buffer-overflow vulnerability has been discovered in the H5O__chunk_protect function of the HDF5 package. This vulnerability can lead to crashes or potential code execution. Users are advised to update their installations to the latest patched version and consider implementing input validation as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for hdf5 →
FAQ
HDF5 is a data model, library, and file format for storing and managing large amounts of numerical data. It is commonly used in scientific and engineering applications.
H5O__chunk_protect is a function in the HDF5 library that is responsible for protecting a chunk of data in memory.
A heap-buffer-overflow vulnerability occurs when a program tries to read or write data beyond the bounds of a buffer allocated in the heap. This can lead to crashes or potentially allow attackers to execute arbitrary code.
This vulnerability can be exploited by manipulating certain input data that triggers the heap-buffer-overflow in H5O__chunk_protect. An attacker could potentially craft malicious input to execute arbitrary code or cause a denial-of-service.
To protect your system, it is recommended to update the HDF5 package to a version that includes the fix for this vulnerability. Additionally, implementing input validation and avoiding the use of the affected functionality can help mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for hdf5.
