Log in Start free

Vulnerability · Published Jan 5, 2022 · Assigned by mitre

CVE-2021-45832

Medium 5.5

In plain English

A medium-severity security flaw in the hdf5 package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.8%top 44.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service (context-dependent).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12hdf5no fix listedDEBIAN-CVE-2021-45832
Debian:13hdf5no fix listedDEBIAN-CVE-2021-45832
Debian:14hdf5no fix listedDEBIAN-CVE-2021-45832
Ubuntu:22.04:LTShdf5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:24.04:LTShdf5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:25.10hdf5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:26.04:LTShdf5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:26.10hdf5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:22.04:LTSinsighttoolkit5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:24.04:LTSinsighttoolkit5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:25.10insighttoolkit5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:26.04:LTSinsighttoolkit5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:26.10insighttoolkit5no fix listedUBUNTU-CVE-2021-45832
Ubuntu:22.04:LTSparaviewno fix listedUBUNTU-CVE-2021-45832
Ubuntu:24.04:LTSparaviewno fix listedUBUNTU-CVE-2021-45832
Ubuntu:25.10paraviewno fix listedUBUNTU-CVE-2021-45832
Ubuntu:26.04:LTSparaviewno fix listedUBUNTU-CVE-2021-45832
Ubuntu:26.10paraviewno fix listedUBUNTU-CVE-2021-45832

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References