Out-of-bounds read in HDF5 - CVE-2020-10811

Vulnerability identifier: #VU26295

CSH Severity: Low

CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-10811

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in the H5O__layout_decode() function in H5Olayout.c. A remote attacker can pass specially crafted data to the application, trigger out-of-bounds read error and read contents of memory on the system or perform a denial of service attack.

HDF5
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Module for HPC
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
openEuler
SUSE Linux Enterprise Module for Packagehub Subpackages
hdf5-debuginfo
hdf5-mpich-static
hdf5-debugsource
hdf5-devel
hdf5
hdf5-mpich-devel
hdf5-openmpi-static
hdf5-openmpi
hdf5-mpich
hdf5-openmpi-devel
libhdf5-gnu-hpc
hdf5_1_10_8-gnu-openmpi1-hpc-module
libhdf5-gnu-mvapich2-hpc
hdf5-gnu-openmpi1-hpc-devel
hdf5-gnu-mvapich2-hpc-devel
hdf5-gnu-hpc-devel
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo
hdf5_1_10_8-gnu-mvapich2-hpc-debugsource
hdf5_1_10_8-gnu-hpc
hdf5_1_10_8-gnu-hpc-debuginfo
hdf5_1_10_8-gnu-hpc-debugsource
hdf5_1_10_8-gnu-hpc-devel
hdf5_1_10_8-gnu-hpc-devel-static
hdf5_1_10_8-gnu-hpc-module
hdf5_1_10_8-gnu-mvapich2-hpc
hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5-gnu-openmpi1-hpc
hdf5_1_10_8-gnu-mvapich2-hpc-devel
hdf5_1_10_8-gnu-mvapich2-hpc-devel-static
hdf5_1_10_8-gnu-mvapich2-hpc-module
hdf5_1_10_8-gnu-openmpi1-hpc
hdf5_1_10_8-gnu-openmpi1-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi1-hpc-debugsource
hdf5_1_10_8-gnu-openmpi1-hpc-devel
hdf5_1_10_8-gnu-openmpi1-hpc-devel-static
libhdf5_cpp_1_10_8-gnu-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc
libhdf5_fortran_1_10_8-gnu-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-hpc
libhdf5_fortran-gnu-openmpi1-hpc
libhdf5_fortran-gnu-mvapich2-hpc
libhdf5_fortran-gnu-hpc
libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo
libhdf5_cpp_1_10_8-gnu-hpc
libhdf5_cpp-gnu-hpc
libhdf5_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5_1_10_8-gnu-openmpi1-hpc
libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_1_10_8-gnu-mvapich2-hpc
libhdf5_1_10_8-gnu-hpc-debuginfo
libhdf5_1_10_8-gnu-hpc
libhdf5_hl-gnu-hpc
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc
libhdf5hl_fortran_1_10_8-gnu-hpc
libhdf5_hl_fortran-gnu-openmpi1-hpc
libhdf5_hl_fortran-gnu-mvapich2-hpc
libhdf5_hl_fortran-gnu-hpc
libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo
libhdf5_hl_cpp_1_10_8-gnu-hpc
libhdf5_hl_cpp-gnu-hpc
libhdf5_hl_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5_hl_1_10_8-gnu-openmpi1-hpc
libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_hl_1_10_8-gnu-mvapich2-hpc
libhdf5_hl_1_10_8-gnu-hpc-debuginfo
libhdf5_hl_1_10_8-gnu-hpc
libhdf5_hl-gnu-openmpi1-hpc
libhdf5_hl-gnu-mvapich2-hpc
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo
hdf5-gnu-openmpi2-hpc-devel
hdf5-gnu-mpich-hpc-devel
libhdf5-gnu-mpich-hpc
libhdf5-gnu-openmpi2-hpc
libhdf5_1_10_8-gnu-mpich-hpc
libhdf5_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_1_10_8-gnu-openmpi2-hpc
libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi2-hpc-devel-static
hdf5_1_10_8-gnu-openmpi2-hpc-devel
hdf5_1_10_8-gnu-openmpi2-hpc-debugsource
hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi2-hpc
hdf5_1_10_8-gnu-mpich-hpc-module
hdf5_1_10_8-gnu-mpich-hpc-devel-static
hdf5_1_10_8-gnu-mpich-hpc-devel
hdf5_1_10_8-gnu-mpich-hpc-debugsource
hdf5_1_10_8-gnu-mpich-hpc-debuginfo
hdf5_1_10_8-gnu-mpich-hpc
libhdf5_hl_1_10_8-gnu-openmpi2-hpc
libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_hl_fortran-gnu-mpich-hpc
libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_hl_fortran-gnu-openmpi2-hpc
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc
libhdf5_fortran-gnu-mpich-hpc
libhdf5_fortran-gnu-openmpi2-hpc
libhdf5_fortran_1_10_8-gnu-mpich-hpc
libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi2-hpc-module
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_hl-gnu-mpich-hpc
libhdf5_hl-gnu-openmpi2-hpc
libhdf5_hl_1_10_8-gnu-mpich-hpc
libhdf5_cpp-gnu-mpich-hpc
libhdf5_cpp-gnu-mvapich2-hpc
libhdf5_cpp-gnu-openmpi2-hpc
libhdf5_cpp_1_10_8-gnu-mpich-hpc
libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo
hdf5_1_10_8-hpc-examples
libhdf5_hl_cpp-gnu-openmpi2-hpc
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo
hdf5-hpc-examples
libhdf5_hl_cpp-gnu-mpich-hpc
libhdf5_hl_cpp-gnu-mvapich2-hpc
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5-gnu-openmpi3-hpc
hdf5_1_10_8-gnu-openmpi3-hpc-module
hdf5_1_10_8-gnu-openmpi3-hpc-devel-static
hdf5_1_10_8-gnu-openmpi3-hpc-devel
hdf5_1_10_8-gnu-openmpi3-hpc-debugsource
hdf5_1_10_8-gnu-openmpi3-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi3-hpc
libhdf5_1_10_8-gnu-openmpi3-hpc
libhdf5_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_cpp-gnu-openmpi3-hpc
hdf5-gnu-openmpi3-hpc-devel
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_fortran-gnu-openmpi3-hpc
libhdf5_hl_cpp-gnu-openmpi3-hpc
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_hl_fortran-gnu-openmpi3-hpc
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc
hdf5-gnu-hpc
hdf5-gnu-mvapich2-hpc
hdf5-gnu-openmpi2-hpc
hdf5-gnu-openmpi3-hpc
libhdf5_hl-gnu-openmpi3-hpc
libhdf5_hl_1_10_8-gnu-openmpi3-hpc
libhdf5_hl_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo
hdf5-gnu-mpich-hpc
hdf5-gnu-openmpi4-hpc-devel
libhdf5-gnu-openmpi4-hpc
libhdf5_cpp-gnu-openmpi4-hpc
hdf5-gnu-openmpi4-hpc
libhdf5_hl_cpp-gnu-openmpi4-hpc
libhdf5_hl_fortran-gnu-openmpi4-hpc
libhdf5_fortran-gnu-openmpi4-hpc
libhdf5_hl-gnu-openmpi4-hpc

Install update from vendor's website.

hdf5-debuginfo - addressed in versions 1.10.8-1, 1.12.1-2, 1.12.1-3
hdf5-mpich-static - addressed in versions 1.10.8-1, 1.12.1-3
hdf5-debugsource - addressed in versions 1.10.8-1, 1.12.1-2, 1.12.1-3
hdf5-devel - addressed in versions 1.10.8-1, 1.12.1-2, 1.12.1-3
hdf5 - addressed in versions 1.10.8-1, 1.12.1-2, 1.12.1-3
hdf5-mpich-devel - addressed in versions 1.10.8-1, 1.12.1-3
hdf5-openmpi-static - addressed in versions 1.10.8-1, 1.12.1-3
hdf5-openmpi - addressed in versions 1.10.8-1, 1.12.1-3
hdf5-mpich - addressed in versions 1.10.8-1, 1.12.1-3
hdf5-openmpi-devel - addressed in versions 1.10.8-1, 1.12.1-3
libhdf5-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5_1_10_8-gnu-openmpi1-hpc-module - update to 1.10.8-3.12.2
libhdf5-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-openmpi1-hpc-devel - update to 1.10.8-3.12.2
hdf5-gnu-mvapich2-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-debugsource - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-debugsource - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-devel-static - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-module - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-mvapich2-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-devel-static - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-module - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-debugsource - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-devel - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-devel-static - update to 1.10.8-3.12.2
libhdf5_cpp_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_fortran-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_fortran-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_fortran-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl_fortran-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5_hl_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5-gnu-openmpi2-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5-gnu-mpich-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-devel-static - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-debugsource - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mpich-hpc-module - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-devel-static - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-debugsource - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_fortran-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_fortran-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-openmpi2-hpc-module - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_cpp-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-hpc-examples - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5-hpc-examples - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
hdf5_1_10_8-gnu-openmpi3-hpc-module - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-devel-static - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-devel - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-debugsource - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_cpp-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc-devel - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_hl_fortran-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
hdf5-gnu-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-mvapich2-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-openmpi2-hpc - update to 1.10.8-150200.8.4.2
hdf5-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_hl_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
hdf5-gnu-mpich-hpc - addressed in versions 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc-devel - update to 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2

• https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt
• https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2
• https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0/

• Multiple vulnerabilities in HDF5
• SUSE update for hdf5
• SUSE update for hdf5
• SUSE update for hdf5, suse-hpc
• SUSE update for hdf5
• SUSE update for hdf5, suse-hpc
• openEuler 20.03 LTS SP3 update for hdf5
• openEuler 22.03 LTS update for hdf5
• openEuler 20.03 LTS SP1 update for hdf5