Search CVE reports

Toggle filters

1 – 3 of 3 results

CVE-2021-3622

Medium priority
Needs evaluation

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow....

1 affected package

hivex

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
hivex Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-3504

Medium priority

Some fixes available 5 of 12

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause...

1 affected package

hivex

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
hivex Vulnerable Vulnerable Fixed Fixed Not in release
Show less packages

CVE-2014-9273

Medium priority
Ignored

lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.

1 affected package

hivex

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
hivex — — — Not affected Not affected
Show less packages