CVE-2021-3504

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

Hivex is a library for extracting the contents of Windows Registry "hive" files. It is designed to be secure against buggy or malicious registry files.

Security Fix(es):

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.(CVE-2021-3504)

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

• QEMU: msix: OOB access during mmio operations may lead to DoS (CVE-2020-13754)

• hivex: Buffer overflow when provided invalid node key length (CVE-2021-3504)

• QEMU: net: an assert failure via eth_get_gso_type (CVE-2020-27617)

• QEMU: net: infinite loop in loopback mode may lead to stack overflow (CVE-2021-3416)

• qemu: out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• cannot restart default network and firewalld: iptables: No chain/target/match by that name. (BZ#1958301)

• Rocky Linux8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) (BZ#1975679)

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

• QEMU: msix: OOB access during mmio operations may lead to DoS (CVE-2020-13754)

• hivex: Buffer overflow when provided invalid node key length (CVE-2021-3504)

• QEMU: net: an assert failure via eth_get_gso_type (CVE-2020-27617)

• QEMU: net: infinite loop in loopback mode may lead to stack overflow (CVE-2021-3416)

• qemu: out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• cannot restart default network and firewalld: iptables: No chain/target/match by that name. (BZ#1958301)

• RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) (BZ#1975679)

• Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500

A flaw was found in the hivex library. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability (CVE-2021-3504).

This update for hivex fixes the following issues:

• CVE-2021-3504: hivex: missing bounds check within hivex_open() (bsc#1185013)

This update was imported from the SUSE:SLE-15:Update update project.

This update for hivex fixes the following issues:

• CVE-2021-3504: hivex: missing bounds check within hivex_open() (bsc#1185013)

These are all security issues fixed in the hivex-1.3.21-2.2 package on the GA media of openSUSE Tumbleweed.

This update for hivex fixes the following issues:

• CVE-2021-3504: hivex: missing bounds check within hivex_open() (bsc#1185013)

This update for hivex fixes the following issues:

• CVE-2021-3504: hivex: missing bounds check within hivex_open() (bsc#1185013)

It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information.

USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information.