CVE-2021-45833: 
NixOS vulnerability analysis and mitigation

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D_createchunkfilemap_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent). The vulnerability was discovered and disclosed in December 2021 and affects HDF5 software versions through 1.13.1-1 (NVD, CVE).

The vulnerability is classified as a stack-based buffer overflow occurring in the H5D_createchunkfilemap_hyper function within the H5Dchunk.c file. The CVSS v3.1 base score is 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability has been assigned CWE-787 (Out-of-bounds Write) (NVD).

The primary impact of this vulnerability is a Denial of Service condition when exploited. The vulnerability affects the system's availability while maintaining confidentiality and integrity, as indicated by the CVSS metrics showing no impact on confidentiality (C:N) and integrity (I:N), but high impact on availability (A:H) (NVD).

The vulnerability has been fixed in version 1.14.5+repack-3 of HDF5. Users are advised to upgrade to this or later versions to mitigate the vulnerability. For systems where upgrading is not immediately possible, limiting access to the h5dump utility and validating input files before processing can help reduce risk (Debian Tracker).