CVE catalog

CVE-2017-17505

hdf5: CVE-2017-17505

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.22% · Oct 27, 2026

In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianhdf5sid2.2.0+repack-5fixed
Debianhdf5forky2.2.0+repack-5fixed
Debianhdf5trixie1.14.5+repack-3fixed
Debianhdf5bookworm1.10.8+repack1-1fixed
Ubuntuhdf5pro1.10.0-patch1+docs-4vulnerable
Ubuntuhdf5pro1.10.0-patch1+docs-4ubuntu0.1~esm1fixed
Ubuntuhdf5pro1.10.0-patch1+docs-4vulnerable
Ubuntuhdf5pro1.10.0-patch1+docs-4ubuntu0.1~esm1fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise module for hpc 121.10.8-3.12.2fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise module for hpc 121.10.8-3.12.2fixed
Susehdf5_1_10_8-gnu-openmpi1-hpclinux enterprise module for hpc 121.10.8-3.12.2fixed
Susesuse-hpclinux enterprise module for hpc 120.5.20220206.0c6b168-5.2fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.3fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-openmpi2-hpclinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-openmpi3-hpclinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.3fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-openmpi2-hpclinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-openmpi3-hpclinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3fixed
Susehdf5_1_10_8-gnu-openmpi2-hpclinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3fixed
Susesuse-hpclinux enterprise high performance computing 15-espos0.5.20220206.0c6b168-150000.11.3.1fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3fixed
Susehdf5_1_10_8-gnu-openmpi2-hpclinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3fixed
Susesuse-hpclinux enterprise high performance computing 15-ltss0.5.20220206.0c6b168-150000.11.3.1fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-openmpi2-hpclinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3fixed
Susehdf5_1_10_8-gnu-openmpi2-hpclinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianhdf5sourcesid1.10.4+repack-1not yet assignedNot reported[884365]
Debianhdf5sourceforky1.10.4+repack-1not yet assignedNot reported[884365]
Debianhdf5sourcetrixie1.10.4+repack-1not yet assignedNot reported[884365]
Debianhdf5sourcebookworm1.10.4+repack-1not yet assignedNot reported[884365]
Ubuntuhdf5debpro1.10.0-patch1+docs-4ubuntu0.1~esm1Not reportedUSN-4817-1Not reported
Ubuntuhdf5debpro1.10.0-patch1+docs-4ubuntu0.1~esm1Not reportedUBUNTU-CVE-2017-17505Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise module for hpc 121.10.8-3.12.2Not reportedSUSE-SU-2022:1933-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise module for hpc 121.10.8-3.12.2Not reportedSUSE-SU-2022:1933-1Not reported
Susehdf5_1_10_8-gnu-openmpi1-hpcrpmlinux enterprise module for hpc 121.10.8-3.12.2Not reportedSUSE-SU-2022:1933-1Not reported
Susesuse-hpcrpmlinux enterprise module for hpc 120.5.20220206.0c6b168-5.2Not reportedSUSE-SU-2022:1933-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.3Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-openmpi2-hpcrpmlinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-openmpi3-hpcrpmlinux enterprise high performance computing 15 sp2-espos1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.3Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-openmpi2-hpcrpmlinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-openmpi3-hpcrpmlinux enterprise high performance computing 15 sp2-ltss1.10.8-150200.8.4.2Not reportedSUSE-SU-2022:1910-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-openmpi2-hpcrpmlinux enterprise high performance computing 15-espos1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susesuse-hpcrpmlinux enterprise high performance computing 15-espos0.5.20220206.0c6b168-150000.11.3.1Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-openmpi2-hpcrpmlinux enterprise high performance computing 15-ltss1.10.8-150000.8.4.3Not reportedSUSE-SU-2022:1911-1Not reported
Susesuse-hpcrpmlinux enterprise high performance computing 15-ltss0.5.20220206.0c6b168-150000.11.3.1Not reportedSUSE-SU-2022:1911-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-openmpi2-hpcrpmlinux enterprise high performance computing 15 sp1-espos1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported
Susehdf5_1_10_8-gnu-openmpi2-hpcrpmlinux enterprise high performance computing 15 sp1-ltss1.10.8-150100.7.4.3Not reportedSUSE-SU-2022:1903-1Not reported

[Debian bug #884365]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [hdf5-tools]Fixed

    Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • Source package: [hdf5]

    Details (2)
    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.4+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

Next results

Observed:

References