Lucene search

K
rosalinuxROSA LABROSA-SA-2023-2310
HistoryDec 19, 2023 - 8:46 a.m.

Advisory ROSA-SA-2023-2310

2023-12-1908:46:15
ROSA LAB
abf.rosalinux.ru
33
vulnerability
hivex library
windows registry
denial of service
rosa-chrome
suricata update

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

64.8%

software: hivex 1.3.23
OS: ROSA-CHROME

package_evr_string: hivex-1.3.23-4.src.rpm

CVE-ID: CVE-2021-3622
BDU-ID: 2021-04419
CVE-Crit: LOW
CVE-DESC.: A vulnerability in the _get_children () function of the _get_children () library for retrieving the contents of Windows hivex registry branches is related to the operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to perform a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update suricata

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchhivex< 1.3.23UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

64.8%