A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

...

Backdoor.Win32.Asylum.014 Insecure Password Storage

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a83989d36f3b443a757eef1c99f1a373.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Asylum.014 Vulnerability: Cleartext Password Storage Description: Asylum v0.1.4...

Backdoor.Win32.Agent.ad Insecure Credential Storage

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d2b933ebadd5c808ca4c68ae173e2d62.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.ad Vulnerability: Insecure Credential Storage Description: The malware listens ...

USN-5148-2: hivex vulnerability

USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain...

Ubuntu 18.04 LTS / 20.04 LTS : hivex vulnerability (USN-5148-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5148-1 advisory. It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive...

Mozilla Firefox Security Advisory (MFSA2013-45) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Low: hivex

Issue Overview: A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system...

Huawei EulerOS: Security Advisory for hivex (EulerOS-SA-2021-2635)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL CORE 5.04 / MAIN 5.04 : hivex Vulnerability (NS-SA-2021-0112)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has hivex packages installed that are affected by a vulnerability: - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could...

OESA-2021-1361 hivex security update

Hivex is a library for extracting the contents of Windows Registry "hive" files. It is designed to be secure against buggy or malicious registry files. Security Fixes: No description is available for this CVE.CVE-2021-3622...

SUSE SLED15: hivex-devel / libhivex0 / ocaml-hivex / ocaml-hivex-devel / etc (SUSE-SU-2021:3201-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3201-1 advisory. - CVE-2021-3622: Fixed stack overflow due to recursive call of getchildren bsc1189060. Tenable has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : hivex (SUSE-SU-2021:3210-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3210-1 advisory. - CVE-2021-3622: Fixed stack overflow due to recursive call of getchildren bsc1189060. Tenable has extracted the preceding...

EulerOS 2.0 SP2 : hivex (EulerOS-SA-2021-2380)

According to the version of the hivex packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attack...

How to Exploit SQL Server Using Registry Keys

At the Imperva Research Labs we have the chance to scrutinize various security situations. In this blog, we will take a closer look at database security on SQL Server. One routine approach that security practitioners employ to protect databases is deploying honeypots and waiting for bad actors to...

hivex, ocaml, perl, python, ruby security update

CentOS Errata and Security Advisory CESA-2021:3338 An update for hivex is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Low: Red Hat Security Advisory: hivex security update

An update for hivex is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

hivex: stack overflow due to recursive call of _get_children()

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...

[SECURITY] Fedora 34 Update: hivex-1.3.21-1.fc34

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...

Fedora: Security Advisory for hivex (FEDORA-2021-372d83d54e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for hivex (FEDORA-2021-775b170f95)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...