| Severity |
|
| Remote |
|
| Type |
| - |
Unknown |
| + |
Denial of service |
|
| Description |
| + |
A security issue was found in the hivex library before version 1.3.21. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to recursively call the _get_children() function, ultimately leading to a stack overflow. |
|
| References |
| + |
https://bugzilla.redhat.com/show_bug.cgi?id=1975489 |
| + |
https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html |
| + |
https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255 |
|
| Notes |
|