CVE-2024-29165
Fixed in a distro release EPSS <1%CVSS 7.4
HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
Products: hdfgroup hdf5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | hdf5 | no fix |
| Debian 13 | hdf5 | 1.14.5+repack-1 |
| Debian 14 | hdf5 | 1.14.5+repack-1 |
| Red Hat Enterprise Linux ai 1.5 | hdf5 | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-debuginfo | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-debugsource | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-devel | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-openmpi | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-openmpi-debuginfo | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-openmpi-devel | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-openmpi-static | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | hdf5-static | 0:1.14.6-3.1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | libaec | 0:1.1.3-1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | libaec-debuginfo | 0:1.1.3-1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | libaec-debugsource | 0:1.1.3-1.el9ai |
| Red Hat Enterprise Linux ai 1.5 | libaec-devel | 0:1.1.3-1.el9ai |
| Ubuntu 22.04 LTS | hdf5 | no fix |
| Ubuntu 24.04 LTS | hdf5 | no fix |
| Ubuntu Pro 14.04 LTS | hdf5 | no fix |
| Ubuntu Pro 16.04 LTS | hdf5 | no fix |
| Ubuntu Pro 18.04 LTS | hdf5 | no fix |
| Ubuntu Pro 20.04 LTS | hdf5 | no fix |