Bug 1195213 – VUL-1: CVE-2021-46243: hdf5: untrusted pointer dereference vulnerability via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c

Bug 1195213 - (CVE-2021-46243) VUL-1: CVE-2021-46243: hdf5: untrusted pointer dereference vulnerability via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c

(CVE-2021-46243)
Summary:	VUL-1: CVE-2021-46243: hdf5: untrusted pointer dereference vulnerability via ...

Status:	RESOLVED INVALID

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P4 - Low Severity: Minor
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/321475/
Whiteboard:	CVSSv3.1:SUSE:CVE-2021-46243:4.4:(AV:...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2022-01-27 12:44 UTC by Thomas Leroy
Modified:	2022-09-08 11:32 UTC (History)
CC List:	4 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Flags:	eich: needinfo? (thomas.leroy)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Thomas Leroy 2022-01-27 12:44:47 UTC

CVE-2021-46243

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the
function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability
can lead to a Denial of Service (DoS).

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-46243
https://github.com/HDFGroup/hdf5/issues/1326
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46243

Comment 1 Thomas Leroy 2022-01-27 12:52:12 UTC

I managed to reproduce the bug on the following codestreams:
- SUSE:SLE-15-SP1:Update    1.10.4
- SUSE:SLE-15-SP2:Update    1.10.5
- SUSE:SLE-15-SP3:Update    1.10.7
- openSUSE:Factory              1.10.7
- openSUSE:Backports:SLE-15-SP4        1.10.7
- openSUSE:Backports:SLE-15-SP3:Update 1.10.7

Comment 3 Egbert Eich 2022-05-05 07:09:05 UTC

This issue has been reported for version 1.13.1 - which is on the 1.13 development branch. We only ship version 1.10. The reproducer triggers no issue on this version.
-> INVALID

Comment 5 Egbert Eich 2022-09-08 11:32:31 UTC

(In reply to Thomas Leroy from comment #1)
> I managed to reproduce the bug on the following codestreams:
> - SUSE:SLE-15-SP1:Update    1.10.4
> - SUSE:SLE-15-SP2:Update    1.10.5
> - SUSE:SLE-15-SP3:Update    1.10.7
> - openSUSE:Factory              1.10.7
> - openSUSE:Backports:SLE-15-SP4        1.10.7
> - openSUSE:Backports:SLE-15-SP3:Update 1.10.7

@Thomas:

I've tested versions 1.10.3, 1.10.4, 1.10.5 and 1.10.8. I've not been able to reproduce the issue described in
https://github.com/HDFGroup/hdf5/issues/1326

Could you explain what you did to reproduce this?