Advisory ROSA-SA-2021-1853

Software: hivex 1.3.10 OS: Cobalt 7.9 CVE-ID: CVE-2014-9273 CVE-Crit: HIGH CVE-DESC: lib / handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges using small bush files, which triggers reads or writes outside the allowed range. CVE-STATUS: default CVE-REV...

EulerOS Virtualization for ARM 64 3.0.2.0 : hivex (EulerOS-SA-2021-2087)

According to the version of the hivex packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the...

Medium: hivex

Issue Overview: A flaw was found in the hivex library. It is caused due to a lack of bounds check within the hivexopen function. An attacker could input a specially crafted Windows Registry hive file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. Th...

CentOS: Security Advisory for hivex (CESA-2021:2318)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

hivex, ocaml, perl, python, ruby security update

CentOS Errata and Security Advisory CESA-2021:2318 An update for hivex is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : hivex (RHSA-2021:2318)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2318 advisory. - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could...

Scientific Linux Security Update : hivex on SL7.x i686/x86_64 (2021:2318)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2318-1 advisory. - hivex: Buffer overflow when provided invalid node key length CVE-2021-3504 Note that Nessus has not tested for this issue but has instead relied only on...

Oracle Linux 7 : hivex (ELSA-2021-2318)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2318 advisory. 1.3.10-6.11 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950500 Tenable has extracted the preceding description block directly fr...

hivex security update

1.3.10-6.11 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950500...

RHEL 7 : hivex (RHSA-2021:2318)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2318 advisory. Hivex is a library that can read and write Hive files, undocumented binary files that Windows uses to store the Windows Registry on disk. Security...

SUSE: Security Advisory (SUSE-SU-2021:1761-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:1760-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: hivex security update

An update for hivex is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

hivex: Buffer overflow when provided invalid node key length

A flaw was found in the hivex library. It is caused due to a lack of bounds check within the hivexopen function. An attacker could input a specially crafted Windows Registry hive file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat...

openSUSE Security Update : hivex (openSUSE-2021-806)

This update for hivex fixes the following issues : - CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

OESA-2021-1200 hivex security update

Hivex is a library for extracting the contents of Windows Registry "hive" files. It is designed to be secure against buggy or malicious registry files. Security Fixes: A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen...

openSUSE: Security Advisory for hivex (openSUSE-SU-2021:0806-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0806-1 Security update for hivex

This update for hivex fixes the following issues: - CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013 This update was imported from the SUSE:SLE-15:Update update project...

Security update for hivex (moderate)

openSUSE Security Update: Security update for hivex Announcement ID: openSUSE-SU-2021:0806-1 Rating: moderate References: 1185013 Cross-References: CVE-2021-3504 CVSS scores: CVE-2021-3504 NVD : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2021-3504 SUSE: 5.4...

SUSE SLES12 Security Update : hivex (SUSE-SU-2021:1760-1)

This update for hivex fixes the following issues : CVE-2021-3504: hivex: missing bounds check within hivexopen bsc1185013 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...