A flaw was found in the hivex library. This flaw allows...
Moderate severity
Unreviewed
Published
Dec 24, 2021
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Dec 23, 2021
Published to the GitHub Advisory Database
Dec 24, 2021
Last updated
Feb 3, 2023
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
References