CVE catalog
CVE-2018-13871
UBUNTU-CVE-2018-13871
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.85% · Oct 25, 2026
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | hdf5 | pro | 1.8.11-3ubuntu1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu2 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu6 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu7 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu7.1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu7.1+esm1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.11-5ubuntu7.1+esm2 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.15-patch1+docs-4 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.15-patch1+docs-5 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-2 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-3 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-3ubuntu1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-4 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-4ubuntu1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-4ubuntu1.1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-4ubuntu1.1+esm1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.8.16+docs-4ubuntu1.1+esm2 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.0-patch1+docs-4 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.0-patch1+docs-4ubuntu0.1~esm1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.0-patch1+docs-4ubuntu0.1~esm2 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.4+repack-10 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.4+repack-11 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.4+repack-11ubuntu1 | vulnerable |
| Ubuntu | hdf5 | pro | 1.10.4+repack-11ubuntu1+esm1 | vulnerable |
| Ubuntu | hdf5 | 22.04 | 1.10.6+repack-5 | vulnerable |
| Ubuntu | hdf5 | 22.04 | 1.10.7+repack-4ubuntu1 | vulnerable |
| Ubuntu | hdf5 | 22.04 | 1.10.7+repack-4ubuntu2 | vulnerable |
| Ubuntu | hdf5 | 24.04 | 1.10.8+repack1-1ubuntu1 | vulnerable |
| Ubuntu | hdf5 | 24.04 | 1.10.10+repack-3ubuntu1 | vulnerable |
| Ubuntu | hdf5 | 24.04 | 1.10.10+repack-3.1ubuntu3 | vulnerable |
| Ubuntu | hdf5 | 24.04 | 1.10.10+repack-3.1ubuntu4 | vulnerable |
| Ubuntu | hdf5 | 25.10 | 1.14.5+repack-3 | vulnerable |
| Ubuntu | hdf5 | 25.10 | 1.14.5+repack-3build1 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: