CVE-2019-9152

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-9152
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-9152.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-9152
Related
Published
2019-02-25T19:29:01Z
Modified
2025-01-08T06:33:12.086050Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MMxstrdup in H5MM.c when called from H5Odtypedecodehelper in H5Odtype.c.

References

Affected packages

Debian:11 / hdf5

Package

Name
hdf5
Purl
pkg:deb/debian/hdf5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.6+repack-4
1.10.6+repack-4+deb11u1
1.10.6+repack-5
1.10.7+repack-1
1.10.7+repack-2
1.10.7+repack-3
1.10.7+repack-4
1.10.8+repack-1
1.10.8+repack-2
1.10.8+repack-3
1.10.8+repack-4
1.10.8+repack1-1
1.10.10+repack-1
1.10.10+repack-2
1.10.10+repack-3
1.10.10+repack-3.1
1.10.10+repack-3.2
1.10.10+repack-3.2+ports
1.10.10+repack-3.3
1.10.10+repack-4
1.10.10+repack-5
1.12.0+repack-1~exp1
1.12.0+repack-1~exp2
1.12.2+repack-1~exp1
1.14.3+repack-1~exp1
1.14.3+repack1-1~exp2
1.14.3+repack1-1~exp3
1.14.4.3+repack-1~exp1
1.14.4.3+repack-1~exp2
1.14.4.3+repack-1~exp3
1.14.5+repack-1~exp1
1.14.5+repack-1~exp2
1.14.5+repack-1~exp3
1.14.5+repack-1~exp4
1.14.5+repack-1~exp5
1.14.5+repack-1~exp6
1.14.5+repack-1
1.14.5+repack-2
1.14.5+repack-3~exp1
1.14.5+repack-3~exp2
1.14.5+repack-3~exp3
1.14.5+repack-3~exp4
1.14.5+repack-3

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:12 / hdf5

Package

Name
hdf5
Purl
pkg:deb/debian/hdf5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.8+repack1-1
1.10.10+repack-1
1.10.10+repack-2
1.10.10+repack-3
1.10.10+repack-3.1
1.10.10+repack-3.2
1.10.10+repack-3.2+ports
1.10.10+repack-3.3
1.10.10+repack-4
1.10.10+repack-5
1.12.0+repack-1~exp1
1.12.0+repack-1~exp2
1.12.2+repack-1~exp1
1.14.3+repack-1~exp1
1.14.3+repack1-1~exp2
1.14.3+repack1-1~exp3
1.14.4.3+repack-1~exp1
1.14.4.3+repack-1~exp2
1.14.4.3+repack-1~exp3
1.14.5+repack-1~exp1
1.14.5+repack-1~exp2
1.14.5+repack-1~exp3
1.14.5+repack-1~exp4
1.14.5+repack-1~exp5
1.14.5+repack-1~exp6
1.14.5+repack-1
1.14.5+repack-2
1.14.5+repack-3~exp1
1.14.5+repack-3~exp2
1.14.5+repack-3~exp3
1.14.5+repack-3~exp4
1.14.5+repack-3

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:13 / hdf5

Package

Name
hdf5
Purl
pkg:deb/debian/hdf5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.8+repack1-1
1.10.10+repack-1
1.10.10+repack-2
1.10.10+repack-3
1.10.10+repack-3.1
1.10.10+repack-3.2
1.10.10+repack-3.2+ports
1.10.10+repack-3.3
1.10.10+repack-4
1.10.10+repack-5
1.12.0+repack-1~exp1
1.12.0+repack-1~exp2
1.12.2+repack-1~exp1
1.14.3+repack-1~exp1
1.14.3+repack1-1~exp2
1.14.3+repack1-1~exp3
1.14.4.3+repack-1~exp1
1.14.4.3+repack-1~exp2
1.14.4.3+repack-1~exp3
1.14.5+repack-1~exp1
1.14.5+repack-1~exp2
1.14.5+repack-1~exp3
1.14.5+repack-1~exp4
1.14.5+repack-1~exp5
1.14.5+repack-1~exp6
1.14.5+repack-1
1.14.5+repack-2
1.14.5+repack-3~exp1
1.14.5+repack-3~exp2
1.14.5+repack-3~exp3
1.14.5+repack-3~exp4
1.14.5+repack-3

Ecosystem specific 

{
    "urgency": "unimportant"
}

Git / github.com/hdfgroup/hdf5

Affected ranges

Type
GIT
Repo
https://github.com/hdfgroup/hdf5
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f3f29dc7df5f3cc41a5e9462d8c415e540cda3d6