Red Hat Security AdvisoryRHSA-2015:0301
hivex security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) hivex-1.3.10-5.7.el7, perl-hivex-1.3.10-5.7.el7
- Red Hat Enterprise Linux Client Optional (v. 7) hivex-devel-1.3.10-5.7.el7, ocaml-hivex-1.3.10-5.7.el7, ocaml-hivex-devel-1.3.10-5.7.el7 +2
- Red Hat Enterprise Linux Server (v. 7) hivex-1.3.10-5.7.el7, perl-hivex-1.3.10-5.7.el7
- Red Hat Enterprise Linux Server Optional (v. 7) hivex-devel-1.3.10-5.7.el7, ocaml-hivex-1.3.10-5.7.el7, ocaml-hivex-devel-1.3.10-5.7.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) hivex-1.3.10-5.7.el7, perl-hivex-1.3.10-5.7.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) hivex-devel-1.3.10-5.7.el7, ocaml-hivex-1.3.10-5.7.el7, ocaml-hivex-devel-1.3.10-5.7.el7 +2
Fixes 1 record
Priority LOW 22
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00625 · Published 2014-12-08 · Fixed CWE-119
