Nixpkgs security tracker
4.0 MEDIUM
- CVSS version (CVSS): 4.0
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Attack Requirement (AT): None (N)
- Privileges Required (PR): None (N)
- User Interaction (UI): Active (A)
- Vulnerable System Impact Confidentiality (VC): None (N)
- Vulnerable System Impact Integrity (VI): None (N)
- Vulnerable System Impact Availability (VA): High (H)
- Subsequent System Impact Confidentiality (SC): None (N)
- Subsequent System Impact Integrity (SI): None (N)
- Subsequent System Impact Availability (SA): None (N)
- Exploit Maturity (E): Unreported (U)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Attack Requirement (MAT): None (N)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Active (A)
- Modified Vulnerable System Impact Confidentiality (MVC): None (N)
- Modified Vulnerable System Impact Integrity (MVI): None (N)
- Modified Vulnerable System Impact Availability (MVA): High (H)
- Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
- Modified Subsequent System Impact Integrity (MSI): Negligible (N)
- Modified Subsequent System Impact Availability (MSA): Negligible (N)
- Safety (S): Not Defined (X)
- Automatable (AU): Not Defined (X)
- Recovery (R): Not Defined (X)
- Value Density (V): Not Defined (X)
- Vulnerability Response Effort (RE): Not Defined (X)
- Provider Urgency (U): Not Defined (X)
- Confidentiality Req. (CR): Not Defined (X)
- Integrity Req. (IR): Not Defined (X)
- Availability Req. (AR): Not Defined (X)
Activity log
- Created suggestion
Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free.
References
Affected products
- ==<= 2.1.1
Matching in nixpkgs
pkgs.hdf5
Data model, library, and file format for storing and managing data
pkgs.hdf5-cpp
Data model, library, and file format for storing and managing data
pkgs.hdf5-mpi
Data model, library, and file format for storing and managing data
pkgs.hdf5_1_10
Data model, library, and file format for storing and managing data
pkgs.hdf5-blosc
Filter for HDF5 that uses the Blosc compressor
pkgs.hdf5-fortran
Data model, library, and file format for storing and managing data
pkgs.hdf5-threadsafe
Data model, library, and file format for storing and managing data
pkgs.hdf5-fortran-mpi
Data model, library, and file format for storing and managing data
pkgs.pkgsRocm.hdf5-mpi
Data model, library, and file format for storing and managing data
pkgs.haskellPackages.hdf5
Haskell interface to the HDF5 scientific data storage library
pkgs.haskellPackages.hdf5-lite
High-level bindings to the HDF5 "lite" interface
pkgs.pkgsRocm.hdf5-fortran-mpi
Data model, library, and file format for storing and managing data
pkgs.python313Packages.hdf5plugin
Additional compression filters for h5py
Package maintainers
-
@markuskowa Markus Kowalewski <markus.kowalewski@gmail.com>
-
@stephen-huan Stephen Huan <stephen.huan@cgdct.moe>
-
@pbsds Peder Bergebakken Sundt <pbsds@hotmail.com>