Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-17438 →
DEBIAN-CVE-2018-17438
A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafte...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
hdf5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6+repack-1"}]}]
Debian:13
hdf5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6+repack-1"}]}]
Debian:14
hdf5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.6+repack-1"}]}]
Références
- advisory security-tracker.debian.org