CVE-2024-32608
hdf5: multiple CVEs
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Julia. Niedriger laut Red Hat (mittel).
Beschreibung
HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | HDF5_jll | 2.0.0+0 |
| debian 11 | hdf5 | kein Fix angegeben |
| debian 12 | hdf5 | kein Fix angegeben |
| debian 13 | hdf5 | 1.14.5+repack-1 |
| debian 14 | hdf5 | 1.14.5+repack-1 |
| echo | hdf5 | 1.14.4 |
| rapidfort debian 12 | hdf5, rf-hdf5 | 0:1.14.5+repack-1 |
| rapidfort debian 13 | hdf5, rf-hdf5 | 0:1.14.5+repack-1 |
| rapidfort ubuntu 20.04 | hdf5, rf-hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 22.04 | hdf5, rf-hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 24.04 | hdf5, rf-hdf5 | 0:1.14.5+repack-3 |
| Red Hat | hdf5 | kein Fix angegeben |
Alle 19 Einträge aus 14 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | HDF5_jll | 2.0.0+0 |
| debian 11 | hdf5 | kein Fix angegeben |
| debian 12 | hdf5 | kein Fix angegeben |
| debian 13 | hdf5 | 1.14.5+repack-1 |
| debian 14 | hdf5 | 1.14.5+repack-1 |
| echo | hdf5 | 1.14.4 |
| rapidfort debian 12 | hdf5 | 0:1.14.5+repack-1 |
| rapidfort debian 12 | rf-hdf5 | 0:1.14.5+repack-1 |
| rapidfort debian 13 | hdf5 | 0:1.14.5+repack-1 |
| rapidfort debian 13 | rf-hdf5 | 0:1.14.5+repack-1 |
| rapidfort ubuntu 20.04 | hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 20.04 | rf-hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 22.04 | hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 22.04 | rf-hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 24.04 | hdf5 | 0:1.14.5+repack-3 |
| rapidfort ubuntu 24.04 | rf-hdf5 | 0:1.14.5+repack-3 |
| Red Hat | hdf5 | kein Fix angegeben |
| root.io debian 11 | rootio-hdf5 | kein Fix angegeben |
| root.io debian 12 | rootio-hdf5 | kein Fix angegeben |