CVE-2018-11202 Null dereference in n/a

Medium 6.5 Published 16 May 2018 Updated 16 Sep 2024

A NULL pointer dereference in the HDF5 library allows remote attackers to cause a denial of service via crafted files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2018-11202?

CVE-2018-11202 is a medium-severity vulnerability in Hdfgroup Hdf5, published on 16 May 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.

Weakness: CWE-476

Which versions are affected by CVE-2018-11202?

It affects 1 product.

Products include Hdfgroup Hdf5.

How do I fix CVE-2018-11202?

Upgrade to a fixed version.

Is CVE-2018-11202 being exploited?

There is no known exploitation of CVE-2018-11202 in the wild and no public exploit code.

All Hdfgroup Hdf5 vulnerabilities

Sources

Also known as DEBIAN-CVE-2018-11202, GHSA-hmfw-p4xx-rfx7, UBUNTU-CVE-2018-11202.