CVE-2021-3622

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
redhathivex
𝑥
< 1.3.21
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
8.0
redhatenterprise_linux_workstation
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
hivex
bookworm
1.3.23-1
fixed
bullseye
no-dsa
buster
no-dsa
sid
1.3.24-1
fixed
stretch
no-dsa
trixie
1.3.24-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
hivex
bionic
needs-triage
focal
needs-triage
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
hivex-devel
suse enterprise desktop 15 SP2
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 15 SP2
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 15 SP2
1.3.14-5.6.1
fixed
suse enterprise server 15 SP3
1.3.14-5.6.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
libhivex0
suse enterprise desktop 15 SP2
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 12 SP5
1.3.10-5.7.1
fixed
suse enterprise sap 15 SP2
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 12 SP3
1.3.10-5.7.1
fixed
suse enterprise server 12 SP5
1.3.10-5.7.1
fixed
suse enterprise server 15 SP2
1.3.14-5.6.1
fixed
suse enterprise server 15 SP3
1.3.14-5.6.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
ocaml-hivex
suse enterprise desktop 15 SP2
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 15 SP2
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 15 SP2
1.3.14-5.6.1
fixed
suse enterprise server 15 SP3
1.3.14-5.6.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
ocaml-hivex-devel
suse enterprise desktop 15 SP2
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 15 SP2
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 15 SP2
1.3.14-5.6.1
fixed
suse enterprise server 15 SP3
1.3.14-5.6.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
perl-Win-Hivex
suse enterprise desktop 15 SP2
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP3
1.3.14-5.6.1
fixed
suse enterprise desktop 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise desktop 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise desktop 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise sap 12 SP5
1.3.10-5.7.1
fixed
suse enterprise sap 15 SP2
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP3
1.3.14-5.6.1
fixed
suse enterprise sap 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise sap 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise sap 15 SP7
1.3.24-150700.1.6
fixed
suse enterprise server 12 SP3
1.3.10-5.7.1
fixed
suse enterprise server 12 SP5
1.3.10-5.7.1
fixed
suse enterprise server 15 SP2
1.3.14-5.6.1
fixed
suse enterprise server 15 SP3
1.3.14-5.6.1
fixed
suse enterprise server 15 SP4
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP5
1.3.21-150400.2.10
fixed
suse enterprise server 15 SP6
1.3.23-150600.1.5
fixed
suse enterprise server 15 SP7
1.3.24-150700.1.6
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
hivex
RHEL 7
0:1.3.10-6.12.el7_9
fixed
hivex-devel
RHEL 7
0:1.3.10-6.12.el7_9
fixed
ocaml-hivex
RHEL 7
0:1.3.10-6.12.el7_9
fixed
ocaml-hivex-devel
RHEL 7
0:1.3.10-6.12.el7_9
fixed
perl-hivex
RHEL 7
0:1.3.10-6.12.el7_9
fixed
python-hivex
RHEL 7
0:1.3.10-6.12.el7_9
fixed
ruby-hivex
RHEL 7
0:1.3.10-6.12.el7_9
fixed
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=1975489
https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255
https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S35TVTAPHORSUIFYNFBHKLQRPVFUPXBE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/USD4OEV6L3RPHE32V2MJ4JPFBODINWSU/
https://bugzilla.redhat.com/show_bug.cgi?id=1975489
https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255
https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S35TVTAPHORSUIFYNFBHKLQRPVFUPXBE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/USD4OEV6L3RPHE32V2MJ4JPFBODINWSU/