Resource exhaustion in HDF5 - CVE-2018-17234

Vulnerability identifier: #VU63931

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-17234

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5. A remote attacker can trick the victim into opening a specially crafted HDF5 file and perform a denial of service attack.

HDF5
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Module for HPC
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
openSUSE Leap
openEuler
SUSE Linux Enterprise Module for Packagehub Subpackages
hdf5-debugsource
hdf5-debuginfo
hdf5-devel
hdf5
hdf5_1_10_8-gnu-openmpi1-hpc-module
libhdf5_fortran-gnu-mvapich2-hpc
libhdf5-gnu-hpc
libhdf5-gnu-mvapich2-hpc
libhdf5-gnu-openmpi1-hpc
libhdf5_1_10_8-gnu-hpc
libhdf5_1_10_8-gnu-hpc-debuginfo
libhdf5_1_10_8-gnu-mvapich2-hpc
libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_1_10_8-gnu-openmpi1-hpc
libhdf5_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5_cpp-gnu-hpc
libhdf5_cpp_1_10_8-gnu-hpc
libhdf5_cpp_1_10_8-gnu-hpc-debuginfo
libhdf5_fortran-gnu-hpc
hdf5_1_10_8-gnu-openmpi1-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi1-hpc-devel-static
hdf5_1_10_8-gnu-openmpi1-hpc-devel
hdf5_1_10_8-gnu-openmpi1-hpc-debugsource
hdf5_1_10_8-gnu-openmpi1-hpc
hdf5_1_10_8-gnu-mvapich2-hpc-module
hdf5_1_10_8-gnu-mvapich2-hpc-devel-static
hdf5_1_10_8-gnu-mvapich2-hpc-devel
hdf5_1_10_8-gnu-mvapich2-hpc-debugsource
hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo
hdf5_1_10_8-gnu-mvapich2-hpc
hdf5_1_10_8-gnu-hpc-module
hdf5_1_10_8-gnu-hpc-devel-static
hdf5_1_10_8-gnu-hpc-devel
hdf5_1_10_8-gnu-hpc-debugsource
hdf5_1_10_8-gnu-hpc-debuginfo
hdf5_1_10_8-gnu-hpc
libhdf5_fortran_1_10_8-gnu-hpc
hdf5-gnu-openmpi1-hpc-devel
hdf5-gnu-mvapich2-hpc-devel
hdf5-gnu-hpc-devel
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc
libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-hpc
libhdf5_hl_fortran-gnu-openmpi1-hpc
libhdf5_hl_fortran-gnu-mvapich2-hpc
libhdf5_hl_fortran-gnu-hpc
libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo
libhdf5_fortran-gnu-openmpi1-hpc
libhdf5_hl_cpp_1_10_8-gnu-hpc
libhdf5_hl_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5_hl_cpp-gnu-hpc
libhdf5_fortran_1_10_8-gnu-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo
libhdf5_hl-gnu-hpc
libhdf5_hl-gnu-openmpi1-hpc
libhdf5_hl_1_10_8-gnu-hpc
libhdf5_hl_1_10_8-gnu-hpc-debuginfo
libhdf5_hl_1_10_8-gnu-mvapich2-hpc
libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_hl_1_10_8-gnu-openmpi1-hpc
libhdf5_hl-gnu-mvapich2-hpc
libhdf5_1_10_8-gnu-mpich-hpc
libhdf5-gnu-openmpi2-hpc
libhdf5-gnu-mpich-hpc
hdf5_1_10_8-gnu-openmpi2-hpc-module
hdf5_1_10_8-gnu-openmpi2-hpc-devel-static
hdf5_1_10_8-gnu-openmpi2-hpc-devel
libhdf5_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_1_10_8-gnu-openmpi2-hpc
libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_fortran-gnu-mpich-hpc
hdf5_1_10_8-gnu-mpich-hpc-devel-static
hdf5_1_10_8-gnu-mpich-hpc
hdf5_1_10_8-gnu-mpich-hpc-debuginfo
hdf5_1_10_8-gnu-mpich-hpc-debugsource
hdf5_1_10_8-gnu-mpich-hpc-devel
hdf5_1_10_8-gnu-openmpi2-hpc-debugsource
hdf5_1_10_8-gnu-mpich-hpc-module
hdf5_1_10_8-gnu-openmpi2-hpc
hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc
libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_hl_fortran-gnu-mpich-hpc
libhdf5_hl_fortran-gnu-openmpi2-hpc
libhdf5_fortran-gnu-openmpi2-hpc
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo
hdf5-gnu-mpich-hpc-devel
hdf5-gnu-openmpi2-hpc-devel
libhdf5_fortran_1_10_8-gnu-mpich-hpc
libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_hl-gnu-mpich-hpc
libhdf5_hl-gnu-openmpi2-hpc
libhdf5_hl_1_10_8-gnu-mpich-hpc
libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_hl_1_10_8-gnu-openmpi2-hpc
libhdf5_hl_cpp-gnu-mvapich2-hpc
libhdf5_hl_cpp-gnu-mpich-hpc
libhdf5_hl_cpp-gnu-openmpi2-hpc
hdf5-hpc-examples
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc
hdf5_1_10_8-hpc-examples
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc
libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo
libhdf5_cpp_1_10_8-gnu-mpich-hpc
libhdf5_cpp-gnu-openmpi2-hpc
libhdf5_cpp-gnu-mvapich2-hpc
libhdf5_cpp-gnu-mpich-hpc
libhdf5_hl_1_10_8-gnu-openmpi3-hpc
libhdf5_hl_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_hl_cpp-gnu-openmpi3-hpc
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_hl_fortran-gnu-openmpi3-hpc
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_cpp-gnu-openmpi3-hpc
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_fortran-gnu-openmpi3-hpc
hdf5_1_10_8-gnu-openmpi3-hpc-module
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo
libhdf5_hl-gnu-openmpi3-hpc
libhdf5-gnu-openmpi3-hpc
libhdf5_1_10_8-gnu-openmpi3-hpc
hdf5-gnu-hpc
hdf5-gnu-openmpi3-hpc-devel
hdf5-gnu-openmpi3-hpc
hdf5-gnu-openmpi2-hpc
hdf5_1_10_8-gnu-openmpi3-hpc-devel-static
hdf5_1_10_8-gnu-openmpi3-hpc-devel
hdf5_1_10_8-gnu-openmpi3-hpc-debugsource
hdf5_1_10_8-gnu-openmpi3-hpc-debuginfo
hdf5_1_10_8-gnu-openmpi3-hpc
libhdf5_1_10_8-gnu-openmpi3-hpc-debuginfo
hdf5-gnu-mvapich2-hpc
hdf5-gnu-mpich-hpc
hdf5-gnu-openmpi4-hpc-devel
libhdf5_hl_cpp-gnu-openmpi4-hpc
libhdf5_hl-gnu-openmpi4-hpc
libhdf5-gnu-openmpi4-hpc
libhdf5_cpp-gnu-openmpi4-hpc
hdf5-gnu-openmpi4-hpc
libhdf5_fortran-gnu-openmpi4-hpc
libhdf5_hl_fortran-gnu-openmpi4-hpc

Install update from vendor's website.

HDF5 - update to 1.10.4
hdf5-debugsource - update to 1.8.20-9
hdf5-debuginfo - update to 1.8.20-9
hdf5-devel - update to 1.8.20-9
hdf5 - update to 1.8.20-9
hdf5_1_10_8-gnu-openmpi1-hpc-module - update to 1.10.8-3.12.2
libhdf5_fortran-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5_cpp-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_cpp_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-devel-static - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-devel - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc-debugsource - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
hdf5_1_10_8-gnu-mvapich2-hpc-module - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-devel-static - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-debugsource - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-module - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-devel-static - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-debugsource - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5-gnu-openmpi1-hpc-devel - update to 1.10.8-3.12.2
hdf5-gnu-mvapich2-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-hpc-devel - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5hl_fortran_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_fortran-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl_fortran-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_fortran-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_cpp_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl_cpp_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5_hl_cpp-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_fortran_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_fortran_1_10_8-gnu-openmpi1-hpc-debuginfo - update to 1.10.8-3.12.2
libhdf5_hl-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl_1_10_8-gnu-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-openmpi1-hpc - update to 1.10.8-3.12.2
libhdf5_hl-gnu-mvapich2-hpc - addressed in versions 1.10.8-3.12.2, 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
hdf5_1_10_8-gnu-openmpi2-hpc-module - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-devel-static - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
hdf5_1_10_8-gnu-mpich-hpc-devel-static - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-debugsource - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-mpich-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-openmpi2-hpc-debugsource - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-mpich-hpc-module - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_fortran-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5-gnu-mpich-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
hdf5-gnu-openmpi2-hpc-devel - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_fortran_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150000.8.4.3, 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_cpp-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
hdf5-hpc-examples - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
hdf5_1_10_8-hpc-examples - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-mpich-hpc-debuginfo - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_cpp_1_10_8-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3
libhdf5_cpp-gnu-openmpi2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2
libhdf5_cpp-gnu-mvapich2-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
libhdf5_cpp-gnu-mpich-hpc - addressed in versions 1.10.8-150100.7.4.3, 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
libhdf5_hl_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_hl_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_hl_cpp-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_hl_fortran-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_cpp-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_cpp_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_fortran-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
hdf5_1_10_8-gnu-openmpi3-hpc-module - update to 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_fortran_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
libhdf5_hl-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
libhdf5_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
hdf5-gnu-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-openmpi3-hpc-devel - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
hdf5-gnu-openmpi3-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.2
hdf5-gnu-openmpi2-hpc - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-devel-static - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-devel - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-debugsource - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
hdf5_1_10_8-gnu-openmpi3-hpc - update to 1.10.8-150200.8.4.2
libhdf5_1_10_8-gnu-openmpi3-hpc-debuginfo - update to 1.10.8-150200.8.4.2
hdf5-gnu-mvapich2-hpc - addressed in versions 1.10.8-150200.8.4.2, 1.10.8-150300.4.3.1
hdf5-gnu-mpich-hpc - addressed in versions 1.10.8-150200.8.4.3, 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc-devel - update to 1.10.8-150300.4.3.2
libhdf5_hl_cpp-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_hl-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_cpp-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
hdf5-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_fortran-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2
libhdf5_hl_fortran-gnu-openmpi4-hpc - update to 1.10.8-150300.4.3.2

• https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln3#memory-leak---h5o__chunk_deserialize_memory_leak
• https://bugzilla.redhat.com/show_bug.cgi?id=1633856

• Multiple vulnerabilities in HDF5
• SUSE update for hdf5
• SUSE update for hdf5
• SUSE update for hdf5, suse-hpc
• SUSE update for hdf5
• SUSE update for hdf5, suse-hpc
• openEuler 20.03 LTS update for hdf5