CVE-2021-3622: Medium severity redhat hivex vulnerability
A flaw was found in libhivex. A stack overflow occurs as the children of each listed node grows. This causes the getchildren function to continue calling until it eventually overflows the stack and causes the program to crash.
References:
https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255 https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html
Other sources
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the getchildren() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/hivexto a version that resolves this vulnerability.Fixed in 1.3.21
Event History
Frequently Asked Questions
What is CVE-2021-3622?
CVE-2021-3622 is a vulnerability in the hivex library that allows an attacker to input a specially crafted Windows Registry file, leading to a stack overflow.
What is the severity of CVE-2021-3622?
The severity of CVE-2021-3622 is medium with a CVSS score of 4.3.
Which software is affected by CVE-2021-3622?
Software affected by CVE-2021-3622 includes hivex version up to exclusive 1.3.21, Red Hat Enterprise Linux versions 6.0, 7.0, and 8.0, Red Hat Enterprise Linux Workstation version 7.0, and Fedora versions 33 and 34.
How can I fix CVE-2021-3622?
To fix CVE-2021-3622, update the hivex library to version 1.3.21 or apply the appropriate patches provided by Red Hat.
Where can I find more information about CVE-2021-3622?
You can find more information about CVE-2021-3622 in the references provided: [1] [2] [3].