CVE Vulnerabilities

CVE-2021-46242

Use After Free

Published: Jan 21, 2022 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
8 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Ubuntu
MEDIUM

HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.

Weakness

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.

Affected Software

Name Vendor Start Version End Version
Hdf5 Hdfgroup 1.13.1-1 (including) 1.13.1-1 (including)
Hdf5 Ubuntu bionic *
Hdf5 Ubuntu focal *
Hdf5 Ubuntu impish *
Hdf5 Ubuntu kinetic *
Hdf5 Ubuntu lunar *
Hdf5 Ubuntu mantic *
Hdf5 Ubuntu oracular *
Hdf5 Ubuntu trusty *
Hdf5 Ubuntu trusty/esm *
Hdf5 Ubuntu xenial *
Insighttoolkit4 Ubuntu bionic *
Insighttoolkit4 Ubuntu focal *
Insighttoolkit4 Ubuntu impish *
Insighttoolkit4 Ubuntu kinetic *
Insighttoolkit4 Ubuntu lunar *
Insighttoolkit4 Ubuntu trusty *
Insighttoolkit4 Ubuntu xenial *
Kissplice Ubuntu bionic *
Kissplice Ubuntu focal *
Kissplice Ubuntu impish *
Kissplice Ubuntu kinetic *
Kissplice Ubuntu lunar *
Kissplice Ubuntu mantic *
Kissplice Ubuntu oracular *
Kissplice Ubuntu trusty *
Kissplice Ubuntu xenial *
Paraview Ubuntu bionic *
Paraview Ubuntu focal *
Paraview Ubuntu impish *
Paraview Ubuntu kinetic *
Paraview Ubuntu lunar *
Paraview Ubuntu mantic *
Paraview Ubuntu oracular *
Paraview Ubuntu trusty *
Paraview Ubuntu xenial *
Vtk Ubuntu trusty *
Vtk Ubuntu trusty/esm *
Vtk Ubuntu xenial *
Xdmf Ubuntu bionic *
Xdmf Ubuntu focal *
Xdmf Ubuntu impish *
Xdmf Ubuntu kinetic *
Xdmf Ubuntu lunar *
Xdmf Ubuntu mantic *
Xdmf Ubuntu oracular *
Xdmf Ubuntu trusty *
Xdmf Ubuntu xenial *

Potential Mitigations

References