CVE Vulnerabilities

CVE-2020-10810

NULL Pointer Dereference

Published: Mar 22, 2020 | Modified: Apr 30, 2020
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
5.5 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Ubuntu
LOW

An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Hdf5 Hdfgroup * 1.12.0 (including)
Hdf5 Ubuntu bionic *
Hdf5 Ubuntu eoan *
Hdf5 Ubuntu groovy *
Hdf5 Ubuntu hirsute *
Hdf5 Ubuntu impish *
Hdf5 Ubuntu kinetic *
Hdf5 Ubuntu lunar *
Hdf5 Ubuntu mantic *
Hdf5 Ubuntu trusty *
Hdf5 Ubuntu xenial *

Potential Mitigations

References