CVE-2021-3622

State: Published
Severity: Not scored
Published: Dec 23, 2021
Updated: Aug 3, 2024
Reserved: Jun 25, 2021

Description

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.

Scores

The record has no CVSS score.

Weaknesses

CWE-400

Affected Products

Product	Versions
hivexn/a	hivex-1.3.21Affected

References

FEDORA-2021-372d83d54evendor-advisory
FEDORA-2021-775b170f95vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1975489
https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255
https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.