BaseFortify

Executive Summary

This vulnerability is a heap-based buffer over-read in the HDF5 library's scale-offset filter. It occurs in the function H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. When processing a crafted HDF5 file, the decoder copies a large amount of data from a compressed chunk without verifying if the chunk contains enough bytes. This happens because the attacker controls parameters in the dataset's filter pipeline message, specifically when the stored minimum bits match the full precision of the datatype.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by analyzing HDF5 files for malformed scale-offset filter parameters. Use the HDF5 command-line tools like 'h5dump' to inspect files for corrupted filter pipelines. Check for files with attacker-controlled parameters in the dataset's filter message. Validate files with tools like 'h5check' if available.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause an application crash, leading to a denial of service. If exploited, it may allow an attacker to disrupt the normal operation of software using the HDF5 library, potentially affecting data processing tasks or services that rely on HDF5 files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a denial of service via application crash due to a heap-based buffer over-read. It does not directly affect data confidentiality or integrity, which are key concerns for GDPR and HIPAA. However, repeated crashes could disrupt system availability, potentially impacting compliance with availability requirements in these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update HDF5 to a version later than 2.2.0 to address the heap-based buffer over-read in H5Z__filter_scaleoffset(). Avoid opening untrusted HDF5 files until patched.

Useful 0 Not Useful 0