Debian Hdf5 vulnerabilities

CVE-2024-32621 [CRITICAL] CVE-2024-32621: hdf5 - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read i... HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c), resulting in the corruption of the instruction pointer. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+rep

CVE-2024-29159 [CRITICAL] CVE-2024-29159: hdf5 - HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resul... HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-29164 [CRITICAL] CVE-2024-29164: hdf5 - HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, result... HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-33873 [HIGH] CVE-2024-33873: hdf5 - HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem... HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-33877 [HIGH] CVE-2024-33877: hdf5 - HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct... HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32615 [CRITICAL] CVE-2024-32615: hdf5 - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_d... HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use of an initialized pointer. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32623 [HIGH] CVE-2024-32623: hdf5 - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_... HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c). Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-33874 [CRITICAL] CVE-2024-33874: hdf5 - HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode ... HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-29157 [CRITICAL] CVE-2024-29157: hdf5 - HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in t... HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32608 [CRITICAL] CVE-2024-32608: hdf5 - HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the... HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-29161 [HIGH] CVE-2024-29161: hdf5 - HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, ... HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2018-13869 [CRITICAL] CVE-2018-13869: hdf5 - An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parame... An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. Scope: local bookworm: resolved (fixed in 1.10.7+repack-1) bullseye: open forky: resolved (fixed in 1.10.7+repack-1) sid: resolved (fixed in 1.10.7+repack-1) trixie: resolved (fixed in 1.10.7+repack-1)

CVE-2024-32605 [HIGH] CVE-2024-32605: hdf5 - HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv i... HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c). Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32614 [HIGH] CVE-2024-32614: hdf5 - HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c. HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32611 [CRITICAL] CVE-2024-32611: hdf5 - HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_... HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32624 [HIGH] CVE-2024-32624: hdf5 - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_me... HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c), resulting in the corruption of the instruction pointer. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32609 [HIGH] CVE-2024-32609: hdf5 - HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_... HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2024-32622 [CRITICAL] CVE-2024-32622: hdf5 - HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_... HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c). Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2021-46242 [HIGH] CVE-2021-46242: hdf5 - HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component... HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 1.14.5+repack-1) sid: resolved (fixed in 1.14.5+repack-1) trixie: resolved (fixed in 1.14.5+repack-1)

CVE-2016-4331 [HIGH] CVE-2016-4331: hdf5 - When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5... When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution. Scope: local bookworm: resolved (fixed in 1.10.0-patch1+docs-1) bullseye: resolved (fixed in 1.10.0-patch1+docs-1) forky: resolved (fixed in 1.10.0-patch1+docs-1) sid: