SUSE update for hdf5

Published: 2024-02-20

Risk	Medium
Patch available	YES
Number of vulnerabilities	5
CVE-ID	CVE-2016-4332 CVE-2018-11202 CVE-2019-8396 CVE-2020-10812 CVE-2021-37501
CWE-ID	CWE-122 CWE-476 CWE-119 CWE-787
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	HPC Module Operating systems & Components / Operating system SUSE Linux Enterprise Micro Operating systems & Components / Operating system SUSE Package Hub 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system libhdf5_hl_cpp_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mpich-hpc-devel Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi3-hpc-devel-static Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_hl-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mpich-hpc-debugsource Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_hl-gnu-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi4-hpc-debugsource Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mvapich2-hpc-debugsource Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi4-hpc-module Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi3-hpc-module Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mpich-hpc-devel-static Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-hpc-devel Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-hpc-examples Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi4-hpc-devel Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mvapich2-hpc-devel Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_hl_fortran-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-mpich-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mvapich2-hpc-module Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mvapich2-hpc-devel-static Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_fortran-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi3-hpc-devel Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-hpc-debugsource Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-hpc-module Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-hpc-devel-static Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mpich-hpc-module Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi4-hpc-devel-static Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-mpich-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-mpich-hpc Operating systems & Components / Operating system package or component libhdf5_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_hl_cpp_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5-gnu-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_cpp-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi3-hpc-debugsource Operating systems & Components / Operating system package or component hdf5_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-openmpi3-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5_hl_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-openmpi4-hpc-debuginfo Operating systems & Components / Operating system package or component libhdf5hl_fortran_1_10_11-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component libhdf5_cpp_1_10_11-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component libhdf5_fortran_1_10_11-gnu-mvapich2-hpc-debuginfo Operating systems & Components / Operating system package or component hdf5-gnu-openmpi4-hpc Operating systems & Components / Operating system package or component hdf5-hpc-examples Operating systems & Components / Operating system package or component hdf5-gnu-mvapich2-hpc Operating systems & Components / Operating system package or component hdf5-gnu-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-openmpi4-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-mpich-hpc Operating systems & Components / Operating system package or component hdf5-gnu-mvapich2-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-openmpi3-hpc-devel Operating systems & Components / Operating system package or component hdf5-gnu-openmpi3-hpc Operating systems & Components / Operating system package or component hdf5-gnu-hpc Operating systems & Components / Operating system package or component hdf5-gnu-mpich-hpc-devel Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 5 vulnerabilities.

1) Heap-based buffer overflow

EUVDB-ID: #VU12154

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2016-4332

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to library's failure to check if certain message types support a particular flag and the library can cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library can write outside the bounds of the heap buffer. A local attacker can trigger heap-based buffer overflow and execute arbitrary code with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

Mitigation

Update the affected package hdf5 to the latest version.

Vulnerable software versions

HPC Module: 15-SP5

SUSE Linux Enterprise Micro: 5.5

SUSE Package Hub 15: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

SUSE Linux Enterprise Desktop 15: SP5

openSUSE Leap: 15.4 - 15.5

libhdf5_hl_cpp_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mpich-hpc-devel: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi3-hpc-devel-static: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_hl-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mpich-hpc-debugsource: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_hl-gnu-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi4-hpc-debugsource: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mvapich2-hpc-debugsource: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_fortran-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi4-hpc-module: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_fortran-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi3-hpc-module: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_fortran-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mpich-hpc-devel-static: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-hpc-devel: before 1.10.11-150400.3.12.1

libhdf5_cpp-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-hpc-examples: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi4-hpc-devel: before 1.10.11-150400.3.12.1

libhdf5_hl_fortran-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mvapich2-hpc-devel: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_fortran-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_fortran-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mvapich2-hpc-module: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mvapich2-hpc-devel-static: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_fortran-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi3-hpc-devel: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-hpc-debugsource: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-hpc-module: before 1.10.11-150400.3.12.1

libhdf5_cpp-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-hpc-devel-static: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mpich-hpc-module: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi4-hpc-devel-static: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-mpich-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

libhdf5_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_hl_cpp_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5-gnu-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_cpp-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi3-hpc-debugsource: before 1.10.11-150400.3.12.1

hdf5_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-openmpi3-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5_hl_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-openmpi4-hpc-debuginfo: before 1.10.11-150400.3.12.1

libhdf5hl_fortran_1_10_11-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

libhdf5_cpp_1_10_11-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

libhdf5_fortran_1_10_11-gnu-mvapich2-hpc-debuginfo: before 1.10.11-150400.3.12.1

hdf5-gnu-openmpi4-hpc: before 1.10.11-150400.3.12.1

hdf5-hpc-examples: before 1.10.11-150400.3.12.1

hdf5-gnu-mvapich2-hpc: before 1.10.11-150400.3.12.1

hdf5-gnu-hpc-devel: before 1.10.11-150400.3.12.1

hdf5-gnu-openmpi4-hpc-devel: before 1.10.11-150400.3.12.1

hdf5-gnu-mpich-hpc: before 1.10.11-150400.3.12.1

hdf5-gnu-mvapich2-hpc-devel: before 1.10.11-150400.3.12.1

hdf5-gnu-openmpi3-hpc-devel: before 1.10.11-150400.3.12.1

hdf5-gnu-openmpi3-hpc: before 1.10.11-150400.3.12.1

hdf5-gnu-hpc: before 1.10.11-150400.3.12.1

hdf5-gnu-mpich-hpc-devel: before 1.10.11-150400.3.12.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240538-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU37124

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-11202

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. A remote attacker can perform a denial of service (DoS) attack.