256 matches found
Stack overflow
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...
CVE-2021-3622
CVE-2021-3622 affects the hivex library, where inputting a specially crafted Windows Registry hive can trigger a recursive _get_children() call, causing a stack overflow and impacting system availability. Public details in connected documents confirm hivex as the affected component and the root c...
CVE-2021-3622
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...
CVE-2021-3622
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...
virt:rhel and virt-devel:rhel security update
An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.
...
MGASA-2021-0528 Updated hivex packages fix security vulnerability
Fixes limit recursion in ri-records. CVE-2021-3622...
Updated hivex packages fix security vulnerability
Fixes limit recursion in ri-records. CVE-2021-3622...
Ubuntu: Security Advisory (USN-5148-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5148-2: hivex vulnerability
USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain...
USN-5148-2 hivex vulnerability
USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain...
USN-5148-1: hivex vulnerability
It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...
USN-5148-1 hivex vulnerability
It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...
Ubuntu 18.04 LTS / 20.04 LTS : hivex vulnerability (USN-5148-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5148-1 advisory. It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive...
Huawei EulerOS: Security Advisory for hivex (EulerOS-SA-2021-2662)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : hivex (EulerOS-SA-2021-2662)
According to the versions of the hivex packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause...
Low: hivex
Issue Overview: A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system...
Amazon Linux 2 : hivex (ALAS-2021-1717)
The version of hivex installed on the remote host is prior to 1.3.10-6.12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1717 advisory. A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, whic...
Huawei EulerOS: Security Advisory for hivex (EulerOS-SA-2021-2635)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : hivex (EulerOS-SA-2021-2635)
According to the versions of the hivex packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause...