Lucene search

K
rosalinuxROSA LABROSA-SA-2023-2310
HistoryDec 19, 2023 - 8:46 a.m.

Advisory ROSA-SA-2023-2310

2023-12-1908:46:15
ROSA LAB
abf.rosalinux.ru
7
vulnerability
hivex library
windows registry
denial of service
rosa-chrome
suricata update

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

55.6%

software: hivex 1.3.23
OS: ROSA-CHROME

package_evr_string: hivex-1.3.23-4.src.rpm

CVE-ID: CVE-2021-3622
BDU-ID: 2021-04419
CVE-Crit: LOW
CVE-DESC.: A vulnerability in the _get_children () function of the _get_children () library for retrieving the contents of Windows hivex registry branches is related to the operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to perform a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update suricata

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchhivex< 1.3.23UNKNOWN

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

55.6%