An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function
    H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c. (CVE-2019-9151)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function     H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c. (CVE-2019-9151)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the
    function H5O_link_decode in H5Olink.c. (CVE-2018-13870)

  - An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the
    HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
    (CVE-2018-11206)

  - An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the
    function H5O_link_decode in H5Olink.c. (CVE-2018-13869)

  - An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the
    function H5O_layout_decode in H5Olayout.c, related to HDmemcpy. (CVE-2018-14033)

ID	Name	Product	Family	Type	Severity
465332	Echo: hdf5: security update to 1.14.5+repack-3	Tenable Cloud Security	Echo Local Security Checks	Local	high
465332	Echo: hdf5: security update to 1.14.5+repack-3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
259014	Linux Distros Unpatched Vulnerability : CVE-2019-9151	Nessus	Misc.	Local	high
404862	Alpine: java-hdf5, multiple hdf5 packages: security update to 1.12.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
404862	Alpine: java-hdf5, multiple hdf5 packages: security update to 1.12.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical

Detections

Analytics

CVE-2019-9151

high

Tenable Plugins

high

high

high

critical

critical