CVE-2021-3622

Published December 23rd, 2021

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.

libguestfs/hivex

windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or contact us. http://libguestfs.org

GitHub

150