CVE-2021-3504

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
redhathivex
𝑥
< 1.3.20
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
8.0
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
hivex
bookworm
1.3.23-1
fixed
bullseye
1.3.20-1
fixed
sid
1.3.24-1
fixed
trixie
1.3.24-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
hivex
bionic
Fixed 1.3.15-1ubuntu0.1
released
focal
Fixed 1.3.18-2ubuntu0.1
released
groovy
ignored
hirsute
Fixed 1.3.19-1ubuntu3.21.04.1
released
impish
Fixed 1.3.19-1ubuntu3.21.10.1
released
jammy
needed
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needed
trusty
Fixed 1.3.9-2ubuntu0.1~esm1
released
xenial
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
hivex-devel
suse enterprise desktop 15 SP2
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 15 SP2
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 15 SP2
1.3.14-5.3.1
fixed
suse enterprise server 15 SP3
1.3.14-5.3.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
libhivex0
suse enterprise desktop 15 SP2
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 12 SP5
1.3.10-5.3.1
fixed
suse enterprise sap 15 SP2
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 12 SP3
1.3.10-5.3.1
fixed
suse enterprise server 12 SP5
1.3.10-5.3.1
fixed
suse enterprise server 15 SP2
1.3.14-5.3.1
fixed
suse enterprise server 15 SP3
1.3.14-5.3.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
ocaml-hivex
suse enterprise desktop 15 SP2
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 15 SP2
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 15 SP2
1.3.14-5.3.1
fixed
suse enterprise server 15 SP3
1.3.14-5.3.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
ocaml-hivex-devel
suse enterprise desktop 15 SP2
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 15 SP2
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 15 SP2
1.3.14-5.3.1
fixed
suse enterprise server 15 SP3
1.3.14-5.3.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
perl-Win-Hivex
suse enterprise desktop 15 SP2
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.3.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 12 SP5
1.3.10-5.3.1
fixed
suse enterprise sap 15 SP2
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.3.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 12 SP3
1.3.10-5.3.1
fixed
suse enterprise server 12 SP5
1.3.10-5.3.1
fixed
suse enterprise server 15 SP2
1.3.14-5.3.1
fixed
suse enterprise server 15 SP3
1.3.14-5.3.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
hivex
RHEL 7
0:1.3.10-6.11.el7_9
fixed
hivex-devel
RHEL 7
0:1.3.10-6.11.el7_9
fixed
ocaml-hivex
RHEL 7
0:1.3.10-6.11.el7_9
fixed
ocaml-hivex-devel
RHEL 7
0:1.3.10-6.11.el7_9
fixed
perl-hivex
RHEL 7
0:1.3.10-6.11.el7_9
fixed
python-hivex
RHEL 7
0:1.3.10-6.11.el7_9
fixed
ruby-hivex
RHEL 7
0:1.3.10-6.11.el7_9
fixed
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=1949687
https://lists.debian.org/debian-lts-announce/2021/05/msg00011.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5BNKNVYFL36P2GBEB5O36LHFRYU575H/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQXTEACRWYAZVNEOIWIYUFGG4GOXSQ22/
https://bugzilla.redhat.com/show_bug.cgi?id=1949687
https://lists.debian.org/debian-lts-announce/2021/05/msg00011.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5BNKNVYFL36P2GBEB5O36LHFRYU575H/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQXTEACRWYAZVNEOIWIYUFGG4GOXSQ22/