hivex-1.3.10-6.11.el7
エラータID: AXSA:2021-1845:01
リリース日:
2021/06/09 Wednesday - 04:45
題名:
hivex-1.3.10-6.11.el7
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
Moderate
Description:
- hivex には、hivex_open 関数内で境界チェックを実施しないために、
攻撃者が巧妙に細工された Windows レジストリファイルを入力することで、
hivexが正常な範囲を超えてメモリを読み込んだり、プログラムを
クラッシュさせる脆弱性があります。(CVE-2021-3504)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2021-3504
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.
追加情報:
N/A
ダウンロード:
SRPMS
- hivex-1.3.10-6.11.el7.src.rpm
MD5: 06382e03e50aa7be19798e3a97bd170d
SHA-256: 637d4c1ea9ddf4c2cb09a4ac63bbf70388ba7dd00c48f08b41544d7945c30c2f
Size: 1.23 MB
Asianux Server 7 for x86_64
- hivex-1.3.10-6.11.el7.x86_64.rpm
MD5: 64d58a506ba993b3a80354e17472f941
SHA-256: 30fc0a4d65072e3139d64a57e178a226d6c579ee3e8128a943d7f8e9f223ab98
Size: 100.39 kB - perl-hivex-1.3.10-6.11.el7.x86_64.rpm
MD5: db6efd66a565c75cc1e9075d629c92c2
SHA-256: e9b029db66dd66f85cc23f09d09db7d9385256e724b2e14f72915fa047d4e52d
Size: 40.59 kB - hivex-1.3.10-6.11.el7.i686.rpm
MD5: 7e8a00a044be34196d79d319dc7321cd
SHA-256: bdd7d4afdd04f55a9c8afd93f722fcdf1a01a6cd32498443ac4e64ebb223236d
Size: 101.97 kB
English