UBUNTU-CVE-2025-2153

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-2153

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-2153.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-2153

Related

CVE-2025-2153

Published

2025-03-10T14:15:00Z

Modified

2025-06-03T17:58:40Z

Severity

5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVSS Calculator
8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

References

Affected packages

Ubuntu:Pro:14.04:LTS / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.8.11-5ubuntu7.1+esm2?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.8.11-3ubuntu1

1.8.11-5ubuntu1

1.8.11-5ubuntu2

1.8.11-5ubuntu6

1.8.11-5ubuntu7

1.8.11-5ubuntu7.1

1.8.11-5ubuntu7.1+esm1

1.8.11-5ubuntu7.1+esm2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.8.16+docs-4ubuntu1.1+esm2?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.8.15-patch1+docs-4

1.8.15-patch1+docs-5

1.8.16+docs-1

1.8.16+docs-2

1.8.16+docs-3

1.8.16+docs-3ubuntu1

1.8.16+docs-4

1.8.16+docs-4ubuntu1

1.8.16+docs-4ubuntu1.1

1.8.16+docs-4ubuntu1.1+esm1

1.8.16+docs-4ubuntu1.1+esm2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / insighttoolkit

Package

Name: insighttoolkit
Purl: pkg:deb/ubuntu/insighttoolkit@3.20.1+git20120521-6build1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.20.1+git20120521-6

3.20.1+git20120521-6build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / insighttoolkit4

Package

Name: insighttoolkit4
Purl: pkg:deb/ubuntu/insighttoolkit4@4.9.0-4ubuntu1.1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.1-1ubuntu3

4.8.1-1ubuntu4

4.8.2-3.1ubuntu1

4.9.0-3ubuntu2

4.9.0-4ubuntu1

4.9.0-4ubuntu1.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.0.1+dfsg1-4?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.1.0+dfsg+1-2build1

4.1.0+dfsg+1-3

5.*

5.0.0+dfsg1-2build1

5.0.0+dfsg1-2build2

5.0.1+dfsg1-3

5.0.1+dfsg1-4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.10.0-patch1+docs-4ubuntu0.1~esm2?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.0-patch1+docs-4

1.10.0-patch1+docs-4ubuntu0.1~esm1

1.10.0-patch1+docs-4ubuntu0.1~esm2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / insighttoolkit4

Package

Name: insighttoolkit4
Purl: pkg:deb/ubuntu/insighttoolkit4@4.12.2-dfsg1-1ubuntu1?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.12.2-dfsg1-1ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.4.1+dfsg3-1?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.1.2+dfsg1-2

5.1.2+dfsg1-2build1

5.4.1+dfsg3-1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.10.4+repack-11ubuntu1+esm1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.4+repack-10

1.10.4+repack-11

1.10.4+repack-11ubuntu1

1.10.4+repack-11ubuntu1+esm1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / insighttoolkit4

Package

Name: insighttoolkit4
Purl: pkg:deb/ubuntu/insighttoolkit4@4.13.2-dfsg1-8?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.12.2-dfsg1-4.1ubuntu1

4.13.2-dfsg1-1ubuntu1

4.13.2-dfsg1-4ubuntu1

4.13.2-dfsg1-6

4.13.2-dfsg1-6ubuntu1

4.13.2-dfsg1-8

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.7.0-4ubuntu9?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.1+dfsg4-4

5.7.0-4ubuntu8

5.7.0-4ubuntu9

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.10.7+repack-4ubuntu2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.6+repack-5

1.10.7+repack-4ubuntu1

1.10.7+repack-4ubuntu2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / insighttoolkit4

Package

Name: insighttoolkit4
Purl: pkg:deb/ubuntu/insighttoolkit4@4.13.3withdata-dfsg2-1ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.13.3withdata-dfsg1-4.1

4.13.3withdata-dfsg2-1ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / insighttoolkit5

Package

Name: insighttoolkit5
Purl: pkg:deb/ubuntu/insighttoolkit5@5.2.1-3?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.2.1-1

5.2.1-2

5.2.1-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.10.0~rc1-1build3?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.9.0-2ubuntu1

5.10.0~rc1-1build3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.10.10+repack-4ubuntu3?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.10+repack-3.1ubuntu4

1.10.10+repack-4ubuntu3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / insighttoolkit5

Package

Name: insighttoolkit5
Purl: pkg:deb/ubuntu/insighttoolkit5@5.3.0-7build5?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-7build4

5.3.0-7build5

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.12.1+dfsg-4?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.2+dfsg-6build5

5.11.2+dfsg-7

5.11.2+dfsg-7build1

5.11.2+dfsg-8

5.12.1+dfsg-3

5.12.1+dfsg-3build1

5.12.1+dfsg-4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.10.10+repack-3.1ubuntu4?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.8+repack1-1ubuntu1

1.10.10+repack-3ubuntu1

1.10.10+repack-3.1ubuntu3

1.10.10+repack-3.1ubuntu4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / insighttoolkit5

Package

Name: insighttoolkit5
Purl: pkg:deb/ubuntu/insighttoolkit5@5.3.0-7build4?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-6

5.3.0-6build1

5.3.0-6build2

5.3.0-7

5.3.0-7build1

5.3.0-7build3

5.3.0-7build4

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.11.2+dfsg-6build5?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0+dfsg-2

5.11.0+dfsg-2build1

5.11.2+dfsg-4

5.11.2+dfsg-6

5.11.2+dfsg-6build1

5.11.2+dfsg-6build4

5.11.2+dfsg-6build5

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / hdf5

Package

Name: hdf5
Purl: pkg:deb/ubuntu/hdf5@1.14.5+repack-3?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.10.10+repack-4ubuntu3

1.10.10+repack-5ubuntu1

1.14.5+repack-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / insighttoolkit5

Package

Name: insighttoolkit5
Purl: pkg:deb/ubuntu/insighttoolkit5@5.4.0-2?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-7build5

5.3.0-7build6

5.4.0-2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / paraview

Package

Name: paraview
Purl: pkg:deb/ubuntu/paraview@5.13.2+dfsg-2ubuntu1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.12.1+dfsg-4

5.13.2+dfsg-2ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}