A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function
    H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based
    buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high.
    The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
    (CVE-2025-2153)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function     H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based     buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high.
    The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
    (CVE-2025-2153)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
461720	Echo: hdf5: security update to 1.14.5+repack-3+e1	Tenable Cloud Security	Echo Local Security Checks	Local	low
461720	Echo: hdf5: security update to 1.14.5+repack-3+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	low
258750	Linux Distros Unpatched Vulnerability : CVE-2025-2153	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2025-2153

low

Tenable Plugins

low

low

low