Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2014-9273
Vulnerability from cvelistv5
Published
2014-12-08 16:00
Modified
2024-08-06 13:40
Severity ?
EPSS score ?
Summary
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:40:23.894Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "GLSA-201503-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"name": "openSUSE-SU-2015:0189",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"name": "71279",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/71279"
},
{
"name": "[oss-security] 20141204 Re: CVE request: missing checks for small-sized files in hivex",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"name": "RHSA-2015:0301",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"name": "[oss-security] 20141125 CVE request: missing checks for small-sized files in hivex",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"name": "[Libguestfs] 20141029 [libhivex] Undefined behavior when accessing invalid (too small) registry hives",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"name": "RHSA-2015:1378",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"name": "62792",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/62792"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-10-29T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-06-30T16:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "GLSA-201503-07",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"name": "openSUSE-SU-2015:0189",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"name": "71279",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/71279"
},
{
"name": "[oss-security] 20141204 Re: CVE request: missing checks for small-sized files in hivex",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"name": "RHSA-2015:0301",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"name": "[oss-security] 20141125 CVE request: missing checks for small-sized files in hivex",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"name": "[Libguestfs] 20141029 [libhivex] Undefined behavior when accessing invalid (too small) registry hives",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"name": "RHSA-2015:1378",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"name": "62792",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/62792"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-9273",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-201503-07",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"name": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705",
"refsource": "CONFIRM",
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"name": "openSUSE-SU-2015:0189",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"name": "71279",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/71279"
},
{
"name": "[oss-security] 20141204 Re: CVE request: missing checks for small-sized files in hivex",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"name": "RHSA-2015:0301",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"name": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb",
"refsource": "CONFIRM",
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"name": "[oss-security] 20141125 CVE request: missing checks for small-sized files in hivex",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"name": "[Libguestfs] 20141029 [libhivex] Undefined behavior when accessing invalid (too small) registry hives",
"refsource": "MLIST",
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"name": "RHSA-2015:1378",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"name": "62792",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/62792"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2014-9273",
"datePublished": "2014-12-08T16:00:00",
"dateReserved": "2014-12-04T00:00:00",
"dateUpdated": "2024-08-06T13:40:23.894Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A10BC294-9196-425F-9FB0-B1625465B47F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9BBCD86A-E6C7-4444-9D74-F861084090F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:debian:hivex:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"1.3.10-2\", \"matchCriteriaId\": \"9C345E9F-F4FB-46BE-B55C-DBD7E7DD605F\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.\"}, {\"lang\": \"es\", \"value\": \"lib/handle.c en Hivex anterior a 1.3.11 permite a usuarios locales ejecutar c\\u00f3digo arbitrario y ganar privilegios a trav\\u00e9s de un fichero de hive peque\\u00f1o, lo que provoca una lectura o escritura fuera de rango.\"}]",
"id": "CVE-2014-9273",
"lastModified": "2024-11-21T02:20:31.717",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 4.6, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": true, \"userInteractionRequired\": false}]}",
"published": "2014-12-08T16:59:11.947",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-0301.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1378.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/62792\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/11/25/6\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/12/04/14\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/71279\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1167756\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://security.gentoo.org/glsa/201503-07\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-0301.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1378.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/62792\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/11/25/6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2014/12/04/14\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/71279\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1167756\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://security.gentoo.org/glsa/201503-07\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-9273\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2014-12-08T16:59:11.947\",\"lastModified\":\"2024-11-21T02:20:31.717\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.\"},{\"lang\":\"es\",\"value\":\"lib/handle.c en Hivex anterior a 1.3.11 permite a usuarios locales ejecutar c\u00f3digo arbitrario y ganar privilegios a trav\u00e9s de un fichero de hive peque\u00f1o, lo que provoca una lectura o escritura fuera de rango.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":true,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A10BC294-9196-425F-9FB0-B1625465B47F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03117DF1-3BEC-4B8D-AD63-DBBDB2126081\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:debian:hivex:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.3.10-2\",\"matchCriteriaId\":\"9C345E9F-F4FB-46BE-B55C-DBD7E7DD605F\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0301.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1378.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62792\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/11/25/6\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/12/04/14\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/71279\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1167756\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://security.gentoo.org/glsa/201503-07\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-0301.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1378.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/62792\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/11/25/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2014/12/04/14\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/71279\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1167756\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://security.gentoo.org/glsa/201503-07\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
rhsa-2015_0301
Vulnerability from csaf_redhat
Published
2015-03-05 12:34
Modified
2024-11-22 08:17
Summary
Red Hat Security Advisory: hivex security, bug fix, and enhancement update
Notes
Topic
Updated hivex packages that fix one security issue, several bugs, and add
various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Hive files are undocumented binary files that Windows uses to store the
Windows Registry on disk. Hivex is a library that can read and write to
these files.
It was found that hivex attempted to read beyond its allocated buffer when
reading a hive file with a very small size or with a truncated or
improperly formatted content. An attacker able to supply a specially
crafted hive file to an application using the hivex library could possibly
use this flaw to execute arbitrary code with the privileges of the user
running that application. (CVE-2014-9273)
Red Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for
reporting this issue.
The hivex package has been upgraded to upstream version 1.3.10, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1023978)
This update also fixes the following bugs:
* Due to an error in the hivex_value_data_cell_offset() function, the hivex
utility could, in some cases, print an "Argument list is too long" message
and terminate unexpectedly when processing hive files from the Windows
Registry. This update fixes the underlying code and hivex now processes
hive files as expected. (BZ#1145056)
* A typographical error in the Win::Hivex.3pm manual page has been
corrected. (BZ#1099286)
Users of hivex are advised to upgrade to these updated packages, which
correct these issues and adds these enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated hivex packages that fix one security issue, several bugs, and add\nvarious enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Hive files are undocumented binary files that Windows uses to store the\nWindows Registry on disk. Hivex is a library that can read and write to\nthese files.\n\nIt was found that hivex attempted to read beyond its allocated buffer when\nreading a hive file with a very small size or with a truncated or\nimproperly formatted content. An attacker able to supply a specially\ncrafted hive file to an application using the hivex library could possibly\nuse this flaw to execute arbitrary code with the privileges of the user\nrunning that application. (CVE-2014-9273)\n\nRed Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for\nreporting this issue.\n\nThe hivex package has been upgraded to upstream version 1.3.10, which\nprovides a number of bug fixes and enhancements over the previous version.\n(BZ#1023978)\n\nThis update also fixes the following bugs:\n\n* Due to an error in the hivex_value_data_cell_offset() function, the hivex\nutility could, in some cases, print an \"Argument list is too long\" message\nand terminate unexpectedly when processing hive files from the Windows\nRegistry. This update fixes the underlying code and hivex now processes\nhive files as expected. (BZ#1145056)\n\n* A typographical error in the Win::Hivex.3pm manual page has been\ncorrected. (BZ#1099286)\n\nUsers of hivex are advised to upgrade to these updated packages, which\ncorrect these issues and adds these enhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0301",
"url": "https://access.redhat.com/errata/RHSA-2015:0301"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1023978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1023978"
},
{
"category": "external",
"summary": "1099286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1099286"
},
{
"category": "external",
"summary": "1145056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145056"
},
{
"category": "external",
"summary": "1158992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1158992"
},
{
"category": "external",
"summary": "1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0301.json"
}
],
"title": "Red Hat Security Advisory: hivex security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T08:17:22+00:00",
"generator": {
"date": "2024-11-22T08:17:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:0301",
"initial_release_date": "2015-03-05T12:34:28+00:00",
"revision_history": [
{
"date": "2015-03-05T12:34:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-03-05T12:34:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:17:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_id": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex-devel@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.10-5.7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.10-5.7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.src",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.src",
"product_id": "hivex-0:1.3.10-5.7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mahmoud Al-Qudsi"
],
"organization": "NeoSmart Technologies"
}
],
"cve": "CVE-2014-9273",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2014-11-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1167756"
}
],
"notes": [
{
"category": "description",
"text": "It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hivex: missing checks for small-sized files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9273"
},
{
"category": "external",
"summary": "RHBZ#1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9273",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
}
],
"release_date": "2014-10-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-05T12:34:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0301"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hivex: missing checks for small-sized files"
}
]
}
RHSA-2015:1378
Vulnerability from csaf_redhat
Published
2015-07-20 13:58
Modified
2024-11-22 08:17
Summary
Red Hat Security Advisory: hivex security and bug fix update
Notes
Topic
Updated hivex packages that fix one security issue and one bug are now
available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Hivex is a library that can read and write Hive files, undocumented binary
files that Windows uses to store the Windows Registry on disk.
It was found that hivex attempted to read, and possibly write, beyond its
allocated buffer when reading a hive file with a very small size or with a
truncated or improperly formatted content. An attacker able to supply a
specially crafted hive file to an application using the hivex library could
possibly use this flaw to execute arbitrary code with the privileges of the
user running that application. (CVE-2014-9273)
Red Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for
reporting this issue.
This update also fixes the following bug:
* The hivex(3) man page previously contained a typographical error. This
update fixes the typo. (BZ#1164693)
All hivex users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated hivex packages that fix one security issue and one bug are now\navailable for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Hivex is a library that can read and write Hive files, undocumented binary\nfiles that Windows uses to store the Windows Registry on disk.\n\nIt was found that hivex attempted to read, and possibly write, beyond its\nallocated buffer when reading a hive file with a very small size or with a\ntruncated or improperly formatted content. An attacker able to supply a\nspecially crafted hive file to an application using the hivex library could\npossibly use this flaw to execute arbitrary code with the privileges of the\nuser running that application. (CVE-2014-9273)\n\nRed Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for\nreporting this issue.\n\nThis update also fixes the following bug:\n\n* The hivex(3) man page previously contained a typographical error. This\nupdate fixes the typo. (BZ#1164693)\n\nAll hivex users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1378",
"url": "https://access.redhat.com/errata/RHSA-2015:1378"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1158993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1158993"
},
{
"category": "external",
"summary": "1164693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1164693"
},
{
"category": "external",
"summary": "1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1378.json"
}
],
"title": "Red Hat Security Advisory: hivex security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T08:17:26+00:00",
"generator": {
"date": "2024-11-22T08:17:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:1378",
"initial_release_date": "2015-07-20T13:58:31+00:00",
"revision_history": [
{
"date": "2015-07-20T13:58:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-07-20T13:58:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:17:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.src",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.src",
"product_id": "hivex-0:1.3.3-4.3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.3-4.3.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.3-4.3.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_id": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex-devel@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mahmoud Al-Qudsi"
],
"organization": "NeoSmart Technologies"
}
],
"cve": "CVE-2014-9273",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2014-11-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1167756"
}
],
"notes": [
{
"category": "description",
"text": "It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hivex: missing checks for small-sized files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9273"
},
{
"category": "external",
"summary": "RHBZ#1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9273",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
}
],
"release_date": "2014-10-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-20T13:58:31+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1378"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hivex: missing checks for small-sized files"
}
]
}
rhsa-2015:0301
Vulnerability from csaf_redhat
Published
2015-03-05 12:34
Modified
2024-11-22 08:17
Summary
Red Hat Security Advisory: hivex security, bug fix, and enhancement update
Notes
Topic
Updated hivex packages that fix one security issue, several bugs, and add
various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Hive files are undocumented binary files that Windows uses to store the
Windows Registry on disk. Hivex is a library that can read and write to
these files.
It was found that hivex attempted to read beyond its allocated buffer when
reading a hive file with a very small size or with a truncated or
improperly formatted content. An attacker able to supply a specially
crafted hive file to an application using the hivex library could possibly
use this flaw to execute arbitrary code with the privileges of the user
running that application. (CVE-2014-9273)
Red Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for
reporting this issue.
The hivex package has been upgraded to upstream version 1.3.10, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1023978)
This update also fixes the following bugs:
* Due to an error in the hivex_value_data_cell_offset() function, the hivex
utility could, in some cases, print an "Argument list is too long" message
and terminate unexpectedly when processing hive files from the Windows
Registry. This update fixes the underlying code and hivex now processes
hive files as expected. (BZ#1145056)
* A typographical error in the Win::Hivex.3pm manual page has been
corrected. (BZ#1099286)
Users of hivex are advised to upgrade to these updated packages, which
correct these issues and adds these enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated hivex packages that fix one security issue, several bugs, and add\nvarious enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Hive files are undocumented binary files that Windows uses to store the\nWindows Registry on disk. Hivex is a library that can read and write to\nthese files.\n\nIt was found that hivex attempted to read beyond its allocated buffer when\nreading a hive file with a very small size or with a truncated or\nimproperly formatted content. An attacker able to supply a specially\ncrafted hive file to an application using the hivex library could possibly\nuse this flaw to execute arbitrary code with the privileges of the user\nrunning that application. (CVE-2014-9273)\n\nRed Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for\nreporting this issue.\n\nThe hivex package has been upgraded to upstream version 1.3.10, which\nprovides a number of bug fixes and enhancements over the previous version.\n(BZ#1023978)\n\nThis update also fixes the following bugs:\n\n* Due to an error in the hivex_value_data_cell_offset() function, the hivex\nutility could, in some cases, print an \"Argument list is too long\" message\nand terminate unexpectedly when processing hive files from the Windows\nRegistry. This update fixes the underlying code and hivex now processes\nhive files as expected. (BZ#1145056)\n\n* A typographical error in the Win::Hivex.3pm manual page has been\ncorrected. (BZ#1099286)\n\nUsers of hivex are advised to upgrade to these updated packages, which\ncorrect these issues and adds these enhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0301",
"url": "https://access.redhat.com/errata/RHSA-2015:0301"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1023978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1023978"
},
{
"category": "external",
"summary": "1099286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1099286"
},
{
"category": "external",
"summary": "1145056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145056"
},
{
"category": "external",
"summary": "1158992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1158992"
},
{
"category": "external",
"summary": "1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0301.json"
}
],
"title": "Red Hat Security Advisory: hivex security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T08:17:22+00:00",
"generator": {
"date": "2024-11-22T08:17:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:0301",
"initial_release_date": "2015-03-05T12:34:28+00:00",
"revision_history": [
{
"date": "2015-03-05T12:34:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-03-05T12:34:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:17:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_id": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex-devel@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.10-5.7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.10-5.7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.src",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.src",
"product_id": "hivex-0:1.3.10-5.7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mahmoud Al-Qudsi"
],
"organization": "NeoSmart Technologies"
}
],
"cve": "CVE-2014-9273",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2014-11-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1167756"
}
],
"notes": [
{
"category": "description",
"text": "It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hivex: missing checks for small-sized files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9273"
},
{
"category": "external",
"summary": "RHBZ#1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9273",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
}
],
"release_date": "2014-10-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-05T12:34:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0301"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hivex: missing checks for small-sized files"
}
]
}
rhsa-2015:1378
Vulnerability from csaf_redhat
Published
2015-07-20 13:58
Modified
2024-11-22 08:17
Summary
Red Hat Security Advisory: hivex security and bug fix update
Notes
Topic
Updated hivex packages that fix one security issue and one bug are now
available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Hivex is a library that can read and write Hive files, undocumented binary
files that Windows uses to store the Windows Registry on disk.
It was found that hivex attempted to read, and possibly write, beyond its
allocated buffer when reading a hive file with a very small size or with a
truncated or improperly formatted content. An attacker able to supply a
specially crafted hive file to an application using the hivex library could
possibly use this flaw to execute arbitrary code with the privileges of the
user running that application. (CVE-2014-9273)
Red Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for
reporting this issue.
This update also fixes the following bug:
* The hivex(3) man page previously contained a typographical error. This
update fixes the typo. (BZ#1164693)
All hivex users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated hivex packages that fix one security issue and one bug are now\navailable for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Hivex is a library that can read and write Hive files, undocumented binary\nfiles that Windows uses to store the Windows Registry on disk.\n\nIt was found that hivex attempted to read, and possibly write, beyond its\nallocated buffer when reading a hive file with a very small size or with a\ntruncated or improperly formatted content. An attacker able to supply a\nspecially crafted hive file to an application using the hivex library could\npossibly use this flaw to execute arbitrary code with the privileges of the\nuser running that application. (CVE-2014-9273)\n\nRed Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for\nreporting this issue.\n\nThis update also fixes the following bug:\n\n* The hivex(3) man page previously contained a typographical error. This\nupdate fixes the typo. (BZ#1164693)\n\nAll hivex users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1378",
"url": "https://access.redhat.com/errata/RHSA-2015:1378"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1158993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1158993"
},
{
"category": "external",
"summary": "1164693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1164693"
},
{
"category": "external",
"summary": "1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1378.json"
}
],
"title": "Red Hat Security Advisory: hivex security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T08:17:26+00:00",
"generator": {
"date": "2024-11-22T08:17:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:1378",
"initial_release_date": "2015-07-20T13:58:31+00:00",
"revision_history": [
{
"date": "2015-07-20T13:58:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-07-20T13:58:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:17:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.src",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.src",
"product_id": "hivex-0:1.3.3-4.3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.3-4.3.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.3-4.3.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_id": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex-devel@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mahmoud Al-Qudsi"
],
"organization": "NeoSmart Technologies"
}
],
"cve": "CVE-2014-9273",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2014-11-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1167756"
}
],
"notes": [
{
"category": "description",
"text": "It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hivex: missing checks for small-sized files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9273"
},
{
"category": "external",
"summary": "RHBZ#1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9273",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
}
],
"release_date": "2014-10-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-20T13:58:31+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1378"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hivex: missing checks for small-sized files"
}
]
}
rhsa-2015_1378
Vulnerability from csaf_redhat
Published
2015-07-20 13:58
Modified
2024-11-22 08:17
Summary
Red Hat Security Advisory: hivex security and bug fix update
Notes
Topic
Updated hivex packages that fix one security issue and one bug are now
available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Hivex is a library that can read and write Hive files, undocumented binary
files that Windows uses to store the Windows Registry on disk.
It was found that hivex attempted to read, and possibly write, beyond its
allocated buffer when reading a hive file with a very small size or with a
truncated or improperly formatted content. An attacker able to supply a
specially crafted hive file to an application using the hivex library could
possibly use this flaw to execute arbitrary code with the privileges of the
user running that application. (CVE-2014-9273)
Red Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for
reporting this issue.
This update also fixes the following bug:
* The hivex(3) man page previously contained a typographical error. This
update fixes the typo. (BZ#1164693)
All hivex users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated hivex packages that fix one security issue and one bug are now\navailable for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Hivex is a library that can read and write Hive files, undocumented binary\nfiles that Windows uses to store the Windows Registry on disk.\n\nIt was found that hivex attempted to read, and possibly write, beyond its\nallocated buffer when reading a hive file with a very small size or with a\ntruncated or improperly formatted content. An attacker able to supply a\nspecially crafted hive file to an application using the hivex library could\npossibly use this flaw to execute arbitrary code with the privileges of the\nuser running that application. (CVE-2014-9273)\n\nRed Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for\nreporting this issue.\n\nThis update also fixes the following bug:\n\n* The hivex(3) man page previously contained a typographical error. This\nupdate fixes the typo. (BZ#1164693)\n\nAll hivex users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1378",
"url": "https://access.redhat.com/errata/RHSA-2015:1378"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1158993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1158993"
},
{
"category": "external",
"summary": "1164693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1164693"
},
{
"category": "external",
"summary": "1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1378.json"
}
],
"title": "Red Hat Security Advisory: hivex security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T08:17:26+00:00",
"generator": {
"date": "2024-11-22T08:17:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:1378",
"initial_release_date": "2015-07-20T13:58:31+00:00",
"revision_history": [
{
"date": "2015-07-20T13:58:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-07-20T13:58:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:17:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.src",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.src",
"product_id": "hivex-0:1.3.3-4.3.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.3-4.3.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product_id": "hivex-devel-0:1.3.3-4.3.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.3-4.3.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_id": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_id": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex-devel@1.3.3-4.3.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product_id": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hivex@1.3.3-4.3.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.src"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.src",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "perl-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.3-4.3.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
},
"product_reference": "python-hivex-0:1.3.3-4.3.el6.x86_64",
"relates_to_product_reference": "6Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mahmoud Al-Qudsi"
],
"organization": "NeoSmart Technologies"
}
],
"cve": "CVE-2014-9273",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2014-11-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1167756"
}
],
"notes": [
{
"category": "description",
"text": "It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hivex: missing checks for small-sized files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9273"
},
{
"category": "external",
"summary": "RHBZ#1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9273",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
}
],
"release_date": "2014-10-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-20T13:58:31+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1378"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Client-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-0:1.3.3-4.3.el6.src",
"6Client-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-0:1.3.3-4.3.el6.i686",
"6Client:hivex-0:1.3.3-4.3.el6.src",
"6Client:hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Client:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Client:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Client:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Client:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Client:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.src",
"6ComputeNode:hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.i686",
"6ComputeNode:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6ComputeNode:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-0:1.3.3-4.3.el6.src",
"6Server-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-0:1.3.3-4.3.el6.i686",
"6Server:hivex-0:1.3.3-4.3.el6.src",
"6Server:hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Server:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Server:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Server:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Server:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Server:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.src",
"6Workstation-optional:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation-optional:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation-optional:python-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-0:1.3.3-4.3.el6.src",
"6Workstation:hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-debuginfo-0:1.3.3-4.3.el6.x86_64",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.i686",
"6Workstation:hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:ocaml-hivex-devel-0:1.3.3-4.3.el6.x86_64",
"6Workstation:perl-hivex-0:1.3.3-4.3.el6.x86_64",
"6Workstation:python-hivex-0:1.3.3-4.3.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hivex: missing checks for small-sized files"
}
]
}
RHSA-2015:0301
Vulnerability from csaf_redhat
Published
2015-03-05 12:34
Modified
2024-11-22 08:17
Summary
Red Hat Security Advisory: hivex security, bug fix, and enhancement update
Notes
Topic
Updated hivex packages that fix one security issue, several bugs, and add
various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
Details
Hive files are undocumented binary files that Windows uses to store the
Windows Registry on disk. Hivex is a library that can read and write to
these files.
It was found that hivex attempted to read beyond its allocated buffer when
reading a hive file with a very small size or with a truncated or
improperly formatted content. An attacker able to supply a specially
crafted hive file to an application using the hivex library could possibly
use this flaw to execute arbitrary code with the privileges of the user
running that application. (CVE-2014-9273)
Red Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for
reporting this issue.
The hivex package has been upgraded to upstream version 1.3.10, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1023978)
This update also fixes the following bugs:
* Due to an error in the hivex_value_data_cell_offset() function, the hivex
utility could, in some cases, print an "Argument list is too long" message
and terminate unexpectedly when processing hive files from the Windows
Registry. This update fixes the underlying code and hivex now processes
hive files as expected. (BZ#1145056)
* A typographical error in the Win::Hivex.3pm manual page has been
corrected. (BZ#1099286)
Users of hivex are advised to upgrade to these updated packages, which
correct these issues and adds these enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated hivex packages that fix one security issue, several bugs, and add\nvarious enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
"title": "Topic"
},
{
"category": "general",
"text": "Hive files are undocumented binary files that Windows uses to store the\nWindows Registry on disk. Hivex is a library that can read and write to\nthese files.\n\nIt was found that hivex attempted to read beyond its allocated buffer when\nreading a hive file with a very small size or with a truncated or\nimproperly formatted content. An attacker able to supply a specially\ncrafted hive file to an application using the hivex library could possibly\nuse this flaw to execute arbitrary code with the privileges of the user\nrunning that application. (CVE-2014-9273)\n\nRed Hat would like to thank Mahmoud Al-Qudsi of NeoSmart Technologies for\nreporting this issue.\n\nThe hivex package has been upgraded to upstream version 1.3.10, which\nprovides a number of bug fixes and enhancements over the previous version.\n(BZ#1023978)\n\nThis update also fixes the following bugs:\n\n* Due to an error in the hivex_value_data_cell_offset() function, the hivex\nutility could, in some cases, print an \"Argument list is too long\" message\nand terminate unexpectedly when processing hive files from the Windows\nRegistry. This update fixes the underlying code and hivex now processes\nhive files as expected. (BZ#1145056)\n\n* A typographical error in the Win::Hivex.3pm manual page has been\ncorrected. (BZ#1099286)\n\nUsers of hivex are advised to upgrade to these updated packages, which\ncorrect these issues and adds these enhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:0301",
"url": "https://access.redhat.com/errata/RHSA-2015:0301"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1023978",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1023978"
},
{
"category": "external",
"summary": "1099286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1099286"
},
{
"category": "external",
"summary": "1145056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1145056"
},
{
"category": "external",
"summary": "1158992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1158992"
},
{
"category": "external",
"summary": "1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0301.json"
}
],
"title": "Red Hat Security Advisory: hivex security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T08:17:22+00:00",
"generator": {
"date": "2024-11-22T08:17:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:0301",
"initial_release_date": "2015-03-05T12:34:28+00:00",
"revision_history": [
{
"date": "2015-03-05T12:34:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-03-05T12:34:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:17:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_id": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex-devel@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ocaml-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ruby-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product_id": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perl-hivex@1.3.10-5.7.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-devel-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-devel@1.3.10-5.7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex-debuginfo@1.3.10-5.7.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.i686",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.i686",
"product_id": "hivex-0:1.3.10-5.7.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "hivex-0:1.3.10-5.7.el7.src",
"product": {
"name": "hivex-0:1.3.10-5.7.el7.src",
"product_id": "hivex-0:1.3.10-5.7.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hivex@1.3.10-5.7.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.src"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.src",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "perl-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "python-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby-hivex-0:1.3.10-5.7.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
},
"product_reference": "ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"relates_to_product_reference": "7Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mahmoud Al-Qudsi"
],
"organization": "NeoSmart Technologies"
}
],
"cve": "CVE-2014-9273",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2014-11-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1167756"
}
],
"notes": [
{
"category": "description",
"text": "It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hivex: missing checks for small-sized files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9273"
},
{
"category": "external",
"summary": "RHBZ#1167756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9273",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
}
],
"release_date": "2014-10-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-03-05T12:34:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:0301"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-0:1.3.10-5.7.el7.src",
"7Client-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-0:1.3.10-5.7.el7.i686",
"7Client:hivex-0:1.3.10-5.7.el7.src",
"7Client:hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Client:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Client:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Client:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Client:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Client:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-0:1.3.10-5.7.el7.src",
"7Server-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-0:1.3.10-5.7.el7.i686",
"7Server:hivex-0:1.3.10-5.7.el7.src",
"7Server:hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Server:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Server:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Server:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Server:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Server:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.src",
"7Workstation-optional:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation-optional:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation-optional:ruby-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-0:1.3.10-5.7.el7.src",
"7Workstation:hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-debuginfo-0:1.3.10-5.7.el7.x86_64",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.i686",
"7Workstation:hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ocaml-hivex-devel-0:1.3.10-5.7.el7.x86_64",
"7Workstation:perl-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:python-hivex-0:1.3.10-5.7.el7.x86_64",
"7Workstation:ruby-hivex-0:1.3.10-5.7.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "hivex: missing checks for small-sized files"
}
]
}
gsd-2014-9273
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2014-9273",
"description": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.",
"id": "GSD-2014-9273",
"references": [
"https://www.suse.com/security/cve/CVE-2014-9273.html",
"https://access.redhat.com/errata/RHSA-2015:1378",
"https://access.redhat.com/errata/RHSA-2015:0301",
"https://advisories.mageia.org/CVE-2014-9273.html",
"https://linux.oracle.com/cve/CVE-2014-9273.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2014-9273"
],
"details": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.",
"id": "GSD-2014-9273",
"modified": "2023-12-13T01:22:47.954082Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-9273",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-201503-07",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"name": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705",
"refsource": "CONFIRM",
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"name": "openSUSE-SU-2015:0189",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"name": "71279",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/71279"
},
{
"name": "[oss-security] 20141204 Re: CVE request: missing checks for small-sized files in hivex",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"name": "RHSA-2015:0301",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"name": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb",
"refsource": "CONFIRM",
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"name": "[oss-security] 20141125 CVE request: missing checks for small-sized files in hivex",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"name": "[Libguestfs] 20141029 [libhivex] Undefined behavior when accessing invalid (too small) registry hives",
"refsource": "MLIST",
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"name": "RHSA-2015:1378",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"name": "62792",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/62792"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:debian:hivex:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "1.3.10-2",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-9273"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705",
"refsource": "CONFIRM",
"tags": [
"Exploit",
"Patch",
"Issue Tracking"
],
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"name": "[oss-security] 20141125 CVE request: missing checks for small-sized files in hivex",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"name": "[oss-security] 20141204 Re: CVE request: missing checks for small-sized files in hivex",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"name": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb",
"refsource": "CONFIRM",
"tags": [
"Exploit",
"Patch",
"Issue Tracking"
],
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"name": "[Libguestfs] 20141029 [libhivex] Undefined behavior when accessing invalid (too small) registry hives",
"refsource": "MLIST",
"tags": [
"Vendor Advisory"
],
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"name": "62792",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/62792"
},
{
"name": "openSUSE-SU-2015:0189",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"name": "RHSA-2015:0301",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"name": "RHSA-2015:1378",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"name": "71279",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/71279"
},
{
"name": "GLSA-201503-07",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201503-07"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2018-10-30T16:27Z",
"publishedDate": "2014-12-08T16:59Z"
}
}
}
CVE-2014-9273
Vulnerability from fkie_nvd
Published
2014-12-08 16:59
Modified
2024-11-21 02:20
Severity ?
Summary
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| opensuse | opensuse | 13.1 | |
| opensuse | opensuse | 13.2 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_hpc_node | 6.0 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| debian | hivex | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:debian:hivex:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9C345E9F-F4FB-46BE-B55C-DBD7E7DD605F",
"versionEndIncluding": "1.3.10-2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write."
},
{
"lang": "es",
"value": "lib/handle.c en Hivex anterior a 1.3.11 permite a usuarios locales ejecutar c\u00f3digo arbitrario y ganar privilegios a trav\u00e9s de un fichero de hive peque\u00f1o, lo que provoca una lectura o escritura fuera de rango."
}
],
"id": "CVE-2014-9273",
"lastModified": "2024-11-21T02:20:31.717",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2014-12-08T16:59:11.947",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/62792"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/71279"
},
{
"source": "secalert@redhat.com",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Issue Tracking",
"Patch"
],
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Issue Tracking",
"Patch"
],
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"source": "secalert@redhat.com",
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/62792"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/71279"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Issue Tracking",
"Patch"
],
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Issue Tracking",
"Patch"
],
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
ghsa-qvqq-v774-hxcg
Vulnerability from github
Published
2022-05-14 02:05
Modified
2022-05-14 02:05
Details
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
{
"affected": [],
"aliases": [
"CVE-2014-9273"
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2014-12-08T16:59:00Z",
"severity": "MODERATE"
},
"details": "lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.",
"id": "GHSA-qvqq-v774-hxcg",
"modified": "2022-05-14T02:05:56Z",
"published": "2022-05-14T02:05:56Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9273"
},
{
"type": "WEB",
"url": "https://github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adb"
},
{
"type": "WEB",
"url": "https://github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167756"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201503-07"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/libguestfs/2014-October/msg00235.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00005.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-0301.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1378.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/62792"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2014/11/25/6"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2014/12/04/14"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/71279"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.