CVE catalog

CVE-2018-11206

hdf5: CVE-2018-11206

[CVE catalog]

Severity
Medium · CVSS 5.1CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
2.74% · Oct 25, 2026

An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianhdf5sid2.2.0+repack-5fixed
Debianhdf5forky2.2.0+repack-5fixed
Debianhdf5trixie1.14.5+repack-3fixed
Debianhdf5bookworm1.10.8+repack1-1fixed
Ubuntuhdf5pro1.10.0-patch1+docs-4vulnerable
Ubuntuhdf5pro1.10.0-patch1+docs-4ubuntu0.1~esm1vulnerable
Ubuntuhdf5pro1.10.0-patch1+docs-4ubuntu0.1~esm2vulnerable
Susehdf5_1_10_8-gnu-hpclinux enterprise module for hpc 15 sp31.10.8-150300.4.3.1fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise module for hpc 15 sp31.10.8-150300.4.3.2fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise module for hpc 15 sp31.10.8-150300.4.3.1fixed
Susehdf5_1_10_8-gnu-openmpi3-hpclinux enterprise module for hpc 15 sp31.10.8-150300.4.3.2fixed
Susehdf5_1_10_8-gnu-openmpi4-hpclinux enterprise module for hpc 15 sp31.10.8-150300.4.3.2fixed
Susehdf5_1_10_8-gnu-hpclinux enterprise module for package hub 15 sp31.10.8-150300.4.3.1fixed
Susehdf5_1_10_8-gnu-mpich-hpclinux enterprise module for package hub 15 sp31.10.8-150300.4.3.2fixed
Susehdf5_1_10_8-gnu-mvapich2-hpclinux enterprise module for package hub 15 sp31.10.8-150300.4.3.1fixed
Susehdf5_1_10_8-gnu-openmpi3-hpclinux enterprise module for package hub 15 sp31.10.8-150300.4.3.2fixed
Susehdf5_1_10_8-gnu-openmpi4-hpclinux enterprise module for package hub 15 sp31.10.8-150300.4.3.2fixed
Opensusehdf5_1_10_8-gnu-hpcleap 15.31.10.8-150300.4.3.1fixed
Opensusehdf5_1_10_8-gnu-mpich-hpcleap 15.31.10.8-150300.4.3.2fixed
Opensusehdf5_1_10_8-gnu-mvapich2-hpcleap 15.31.10.8-150300.4.3.1fixed
Opensusehdf5_1_10_8-gnu-openmpi3-hpcleap 15.31.10.8-150300.4.3.2fixed
Opensusehdf5_1_10_8-gnu-openmpi4-hpcleap 15.31.10.8-150300.4.3.2fixed
Opensusehdf5_1_10_8-gnu-hpcleap 15.41.10.8-150300.4.3.1fixed
Opensusehdf5_1_10_8-gnu-mpich-hpcleap 15.41.10.8-150300.4.3.2fixed
Opensusehdf5_1_10_8-gnu-mvapich2-hpcleap 15.41.10.8-150300.4.3.1fixed
Opensusehdf5_1_10_8-gnu-openmpi3-hpcleap 15.41.10.8-150300.4.3.2fixed
Opensusehdf5_1_10_8-gnu-openmpi4-hpcleap 15.41.10.8-150300.4.3.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianhdf5sourcesid1.10.8+repack-1lowNot reportedNot reported
Debianhdf5sourceforky1.10.8+repack-1lowNot reportedNot reported
Debianhdf5sourcetrixie1.10.8+repack-1lowNot reportedNot reported
Debianhdf5sourcebookworm1.10.8+repack-1lowNot reportedNot reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise module for hpc 15 sp31.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise module for hpc 15 sp31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise module for hpc 15 sp31.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-openmpi3-hpcrpmlinux enterprise module for hpc 15 sp31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-openmpi4-hpcrpmlinux enterprise module for hpc 15 sp31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-hpcrpmlinux enterprise module for package hub 15 sp31.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-mpich-hpcrpmlinux enterprise module for package hub 15 sp31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-mvapich2-hpcrpmlinux enterprise module for package hub 15 sp31.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-openmpi3-hpcrpmlinux enterprise module for package hub 15 sp31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Susehdf5_1_10_8-gnu-openmpi4-hpcrpmlinux enterprise module for package hub 15 sp31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-hpcrpmleap 15.31.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-mpich-hpcrpmleap 15.31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-mvapich2-hpcrpmleap 15.31.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-openmpi3-hpcrpmleap 15.31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-openmpi4-hpcrpmleap 15.31.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-hpcrpmleap 15.41.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-mpich-hpcrpmleap 15.41.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-mvapich2-hpcrpmleap 15.41.10.8-150300.4.3.1Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-openmpi3-hpcrpmleap 15.41.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported
Opensusehdf5_1_10_8-gnu-openmpi4-hpcrpmleap 15.41.10.8-150300.4.3.2Not reportedSUSE-SU-2022:1912-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [hdf5-helpers]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [hdf5-tools]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-103]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-103-1]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-cpp-103]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-cpp-103-1]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-dev]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-doc]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-fortran-102]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-hl-100]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-hl-cpp-100]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-hl-fortran-100]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-java]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · all · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-jni]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-mpich-103]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-mpich-103-1]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-mpich-cpp-103-1]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-mpich-dev]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-mpich-fortran-102]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

  • [libhdf5-mpich-hl-100]Fixed

    Source package: [hdf5]

    Details (2)

    • 1.10.8+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

    • 1.10.8+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 1.10.8+repack-1

      dsa · hdf5 · debian · bookworm; dsa · hdf5 · debian · 12

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]