Every CVE Search/ Get API key

CVE-2018-13867

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the...

9.8 Critical

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.00%Up 1.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Record
CVE-2018-13867
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Record
CVE-2018-13867
Updated
2026-11-02
EUVDEUVD-2018-5801 No score

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Record
EUVD-2018-5801
Updated
2026-11-03
GitHub AdvisoriesGHSA-j8jr-chrh-qfrf 9.8

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the...

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Record
GHSA-j8jr-chrh-qfrf
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 9.8

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Record
CVE-2018-13867
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1325 9.8

hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.

Security Fix(es):

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."(CVE-2019-8396)

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.(CVE-2018-13867)

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.(CVE-2018-14033)

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.(CVE-2018-14460)

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.(CVE-2020-10811)

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.(CVE-2021-37501)

Record
OESA-2023-1325
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVOESA-2023-1326 9.8

hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.

Security Fix(es):

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."(CVE-2019-8396)

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.(CVE-2018-13867)

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.(CVE-2018-14033)

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.(CVE-2018-14460)

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.(CVE-2020-10811)

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.(CVE-2021-37501)

Record
OESA-2023-1326
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1327 9.8

hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.

Security Fix(es):

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."(CVE-2019-8396)

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.(CVE-2018-13867)

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.(CVE-2021-37501)

Record
OESA-2023-1327
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1328 9.8

hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.

Security Fix(es):

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."(CVE-2019-8396)

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.(CVE-2018-13867)

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.(CVE-2018-14033)

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.(CVE-2018-14460)

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.(CVE-2020-10811)

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.(CVE-2021-37501)

Record
OESA-2023-1328
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-13867 9.8

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5F__accum_read in H5Faccum.c.

Record
UBUNTU-CVE-2018-13867
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2022:3824-1 No score

Security update for hdf5

This update for hdf5 fixes the following issues:

  • CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  • CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  • CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  • CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  • CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  • CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  • CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  • CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  • CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  • CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  • CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
Record
SUSE-SU-2022:3824-1
Updated
2026-11-02
OSVSUSE-SU-2022:3825-1 No score

Security update for hdf5

This update for hdf5 fixes the following issues:

  • CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  • CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  • CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  • CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  • CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  • CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  • CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  • CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  • CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  • CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  • CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
Record
SUSE-SU-2022:3825-1
Updated
2026-11-02
OSVSUSE-SU-2022:3826-1 No score

Security update for hdf5

This update for hdf5 fixes the following issues:

  • CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  • CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  • CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  • CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  • CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  • CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  • CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  • CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  • CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  • CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  • CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
Record
SUSE-SU-2022:3826-1
Updated
2026-11-02
OSVSUSE-SU-2022:3827-1 No score

Security update for hdf5

This update for hdf5 fixes the following issues:

  • CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  • CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  • CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  • CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  • CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  • CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  • CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  • CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  • CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  • CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  • CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
Record
SUSE-SU-2022:3827-1
Updated
2026-11-02
OSVSUSE-SU-2022:3828-1 No score

Security update for hdf5

This update for hdf5 fixes the following issues:

  • CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  • CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  • CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  • CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  • CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  • CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  • CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  • CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  • CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  • CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  • CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
Record
SUSE-SU-2022:3828-1
Updated
2026-11-02
OSVSUSE-SU-2022:3829-1 No score

Security update for hdf5

This update for hdf5 fixes the following issues:

  • CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  • CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  • CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  • CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  • CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  • CVE-2019-8396: Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  • CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  • CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  • CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  • CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  • CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
Record
SUSE-SU-2022:3829-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
hdf5
openEuler:20.03-LTS-SP3
From an advisory covering 6 CVEs
 before 1.12.1-3.oe1
1.12.1-3.oe1
hdf5
openEuler:22.03-LTS
From an advisory covering 6 CVEs
 before 1.10.8-1.oe2203
1.10.8-1.oe2203
hdf5
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 1.12.1-4.oe2203sp1
1.12.1-4.oe2203sp1
hdf5
openEuler:20.03-LTS-SP1
From an advisory covering 6 CVEs
 before 1.12.1-2.oe1
1.12.1-2.oe1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise Module for HPC 12
From an advisory covering 11 CVEs
 before 1.10.8-3.15.1
1.10.8-3.15.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise Module for HPC 12
From an advisory covering 11 CVEs
 before 1.10.8-3.15.1
1.10.8-3.15.1
hdf5_1_10_8-gnu-openmpi1-hpc
SUSE:Linux Enterprise Module for HPC 12
From an advisory covering 11 CVEs
 before 1.10.8-3.15.1
1.10.8-3.15.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise Module for HPC 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise Module for HPC 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise Module for HPC 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
Show 63 moreShow less
Affected packages
PackageAffectedFixed
hdf5_1_10_8-gnu-openmpi3-hpc
SUSE:Linux Enterprise Module for HPC 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-openmpi4-hpc
SUSE:Linux Enterprise Module for HPC 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-openmpi3-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-openmpi4-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 1.10.8-150400.3.3.1
1.10.8-150400.3.3.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-openmpi3-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-openmpi3-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150200.8.7.1
1.10.8-150200.8.7.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-mpich-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150100.7.7.1
1.10.8-150100.7.7.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-openmpi2-hpc
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
 before 1.10.8-150000.8.7.1
1.10.8-150000.8.7.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise Module for HPC 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise Module for HPC 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise Module for HPC 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi3-hpc
SUSE:Linux Enterprise Module for HPC 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi4-hpc
SUSE:Linux Enterprise Module for HPC 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mpich-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mvapich2-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi3-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi4-hpc
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-hpc
openSUSE:Leap 15.3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mpich-hpc
openSUSE:Leap 15.3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mvapich2-hpc
openSUSE:Leap 15.3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi3-hpc
openSUSE:Leap 15.3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi4-hpc
openSUSE:Leap 15.3
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mpich-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-mvapich2-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi3-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5_1_10_8-gnu-openmpi4-hpc
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 1.10.8-150300.4.6.1
1.10.8-150300.4.6.1
hdf5
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.8.11-3ubuntu11.8.11-5ubuntu11.8.11-5ubuntu21.8.11-5ubuntu61.8.11-5ubuntu71.8.11-5ubuntu7.11.8.11-5ubuntu7.1+esm11.8.11-5ubuntu7.1+esm2
 None known
hdf5
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.8.15-patch1+docs-41.8.15-patch1+docs-51.8.16+docs-11.8.16+docs-21.8.16+docs-3
Show 6 moreShow less
1.8.16+docs-3ubuntu11.8.16+docs-41.8.16+docs-4ubuntu11.8.16+docs-4ubuntu1.11.8.16+docs-4ubuntu1.1+esm11.8.16+docs-4ubuntu1.1+esm2
 None known
hdf5
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.10.0-patch1+docs-41.10.0-patch1+docs-4ubuntu0.1~esm11.10.0-patch1+docs-4ubuntu0.1~esm2
 None known
hdf5
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.10.4+repack-101.10.4+repack-111.10.4+repack-11ubuntu11.10.4+repack-11ubuntu1+esm1
 None known
hdf5
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.10.6+repack-51.10.7+repack-4ubuntu11.10.7+repack-4ubuntu2
 None known
hdf5
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.10.8+repack1-1ubuntu11.10.10+repack-3ubuntu11.10.10+repack-3.1ubuntu31.10.10+repack-3.1ubuntu4
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-13867 is a critical vulnerability (CVSS 9.8) in Hdfgroup Hdf5, published July 10, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. No source names a fixed version.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open