CVE-2021-3622 log

Source
Severity Low
Remote No
Type Denial of service
Description
A security issue was found in the hivex library before version 1.3.21. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to recursively call the _get_children() function, ultimately leading to a stack overflow.
Group Package Affected Fixed Severity Status Ticket
AVG-2248 hivex 1.3.20-6 1.3.21-1 Low Fixed
References
https://bugzilla.redhat.com/show_bug.cgi?id=1975489
https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html
https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255