Vulnerability - CVE-2018-17237

›

›vulnerability›CVE-2018-17237

Name

CVE-2018-17237

Source

NVD ( link)Debian ( link)

Description

A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.

CWEs

Published Date

Sep 20, 2018

Updated Date

Jun 17, 2026

Workaround

-

Advisories

https://github.com/SegfaultMasters/covering360/blob/master/HDF5/README.md#divided-by-zero---h5d__chunk_set_info_real_div_by_zeroExploit

https://github.com/SegfaultMasters/covering360/blob/master/HDF5/README.md#divided-by-zero---h5d__chunk_set_info_real_div_by_zeroExploit

Analysis#

Affected Component

Analysis

Vulnerability Ratings#

6.5

other

4.3

CVSSv2

Others affected components#

Name

Project

Project Version

Version

Status

yocto

master

2.0.0

Not Affected

yocto

scarthgap

1.14.4-3

Not Affected