CVE-2017-17508

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

No affected versions have been published.

Timeline

Published
Dec 11, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-175098.8In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec in H5Gcache.c in libhdf5.a. For example, hCVE-2017-17515.4IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embCVE-2017-175118.8KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remCVE-2017-175128.8sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environmentCVE-2017-175138.8TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might CVE-2017-175148.8boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might alloCVE-2017-175158.8etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which CVE-2017-175168.8scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by theCVE-2017-175178.8libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variablCVE-2017-175188.8swt/motif/browser.c in White_dune (aka whitedune) 0.30.10 does not validate strings before launching the program specified by the BROWSER enCVE-2017-175198.8batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) 2.6 does not validate strings before launching the program specified bCVE-2017-17524.9IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547
CVE-2017-17508: Medium severity, CVSS 6.5 | Vulnix