Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/hdf5@1.12.1-r0?arch=s390x&distroversion=edge&reponame=community |
| Type | apk |
| Namespace | alpine |
| Name | hdf5 |
| Version | 1.12.1-r0 |
| Qualifiers |
| arch |
s390x |
| distroversion |
edge |
| reponame |
community |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 1.12.2-r0 |
| Latest_non_vulnerable_version | 1.12.2-r0 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-4kz9-zrss-83bx |
| vulnerability_id |
VCID-4kz9-zrss-83bx |
| summary |
A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-17435 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00752 |
| scoring_system |
epss |
| scoring_elements |
0.73551 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00752 |
| scoring_system |
epss |
| scoring_elements |
0.73587 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00752 |
| scoring_system |
epss |
| scoring_elements |
0.73592 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00752 |
| scoring_system |
epss |
| scoring_elements |
0.73578 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00752 |
| scoring_system |
epss |
| scoring_elements |
0.73564 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00752 |
| scoring_system |
epss |
| scoring_elements |
0.7359 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-17435 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-17435
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4kz9-zrss-83bx |
|
| 1 |
| url |
VCID-c2d5-k2pu-m3ba |
| vulnerability_id |
VCID-c2d5-k2pu-m3ba |
| summary |
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-14033 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68189 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68228 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68229 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68236 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68213 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-14033 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-14033
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c2d5-k2pu-m3ba |
|
| 2 |
| url |
VCID-kpny-jvxd-h7df |
| vulnerability_id |
VCID-kpny-jvxd-h7df |
| summary |
An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-13869 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68189 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68228 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68229 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68236 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68213 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-13869 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-13869
|
| risk_score |
1.6 |
| exploitability |
0.5 |
| weighted_severity |
3.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kpny-jvxd-h7df |
|
| 3 |
| url |
VCID-nmw3-6t79-pubv |
| vulnerability_id |
VCID-nmw3-6t79-pubv |
| summary |
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-9151 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60782 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60832 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60839 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60827 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60809 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00396 |
| scoring_system |
epss |
| scoring_elements |
0.60824 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-9151 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-9151
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nmw3-6t79-pubv |
|
| 4 |
| url |
VCID-p78p-43n3-yqgg |
| vulnerability_id |
VCID-p78p-43n3-yqgg |
| summary |
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_link_decode in H5Olink.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-13870 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68189 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68228 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68229 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68236 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68213 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-13870 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-13870
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p78p-43n3-yqgg |
|
| 5 |
| url |
VCID-pmtb-wxmw-2yh2 |
| vulnerability_id |
VCID-pmtb-wxmw-2yh2 |
| summary |
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-14460 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68189 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68228 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68229 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68236 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00546 |
| scoring_system |
epss |
| scoring_elements |
0.68213 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-14460 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-14460
|
| risk_score |
2.1 |
| exploitability |
0.5 |
| weighted_severity |
4.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pmtb-wxmw-2yh2 |
|
| 6 |
| url |
VCID-ua6h-y2bc-jqdy |
| vulnerability_id |
VCID-ua6h-y2bc-jqdy |
| summary |
Out-of-bounds Read
An issue was discovered in HDF5. A heap-based buffer over-read exists in the function `H5O__layout_decode()` located in `H5Olayout.c`. It allows an attacker to cause Denial of Service. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-10811 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0043 |
| scoring_system |
epss |
| scoring_elements |
0.62848 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0043 |
| scoring_system |
epss |
| scoring_elements |
0.62891 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.0043 |
| scoring_system |
epss |
| scoring_elements |
0.62876 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.0043 |
| scoring_system |
epss |
| scoring_elements |
0.629 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.0043 |
| scoring_system |
epss |
| scoring_elements |
0.6289 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-10811 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-10811
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
5.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ua6h-y2bc-jqdy |
|
| 7 |
| url |
VCID-untx-ks69-4yc3 |
| vulnerability_id |
VCID-untx-ks69-4yc3 |
| summary |
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-11206 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00768 |
| scoring_system |
epss |
| scoring_elements |
0.73848 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00768 |
| scoring_system |
epss |
| scoring_elements |
0.73884 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00768 |
| scoring_system |
epss |
| scoring_elements |
0.7389 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00768 |
| scoring_system |
epss |
| scoring_elements |
0.73875 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00768 |
| scoring_system |
epss |
| scoring_elements |
0.73859 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00768 |
| scoring_system |
epss |
| scoring_elements |
0.73886 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-11206 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-11206
|
| risk_score |
1.5 |
| exploitability |
0.5 |
| weighted_severity |
3.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-untx-ks69-4yc3 |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/hdf5@1.12.1-r0%3Farch=s390x&distroversion=edge&reponame=community |