Red Hat Security AdvisoryRHSA-2015:1378
hivex security and bug fix update
Released 2015-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) hivex-1.3.3-4.3.el6, perl-hivex-1.3.3-4.3.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) hivex-devel-1.3.3-4.3.el6, ocaml-hivex-1.3.3-4.3.el6, ocaml-hivex-devel-1.3.3-4.3.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) hivex-1.3.3-4.3.el6, perl-hivex-1.3.3-4.3.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) hivex-devel-1.3.3-4.3.el6, ocaml-hivex-1.3.3-4.3.el6, ocaml-hivex-devel-1.3.3-4.3.el6 +1
- Red Hat Enterprise Linux Server (v. 6) hivex-1.3.3-4.3.el6, perl-hivex-1.3.3-4.3.el6
- Red Hat Enterprise Linux Server Optional (v. 6) hivex-devel-1.3.3-4.3.el6, ocaml-hivex-1.3.3-4.3.el6, ocaml-hivex-devel-1.3.3-4.3.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) hivex-1.3.3-4.3.el6, perl-hivex-1.3.3-4.3.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) hivex-devel-1.3.3-4.3.el6, ocaml-hivex-1.3.3-4.3.el6, ocaml-hivex-devel-1.3.3-4.3.el6 +1
Fixes 1 record
Priority LOW 22
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00625 · Published 2014-12-08 · Fixed CWE-119
