Medium ELSA-2021-2318 1 CVE

Moderate: hivex security update (Oracle Linux 7)

Published Jun 10, 2021 · Updated Jun 10, 2021

Ecosystem: Oracle Linux

Summary

[1.3.10-6.11]
- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950500

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	hivex	0:1.3.10-6.11.el7_9
Oracle Linux · 7	hivex-devel	0:1.3.10-6.11.el7_9
Oracle Linux · 7	ocaml-hivex	0:1.3.10-6.11.el7_9
Oracle Linux · 7	ocaml-hivex-devel	0:1.3.10-6.11.el7_9
Oracle Linux · 7	perl-hivex	0:1.3.10-6.11.el7_9
Oracle Linux · 7	python-hivex	0:1.3.10-6.11.el7_9
Oracle Linux · 7	ruby-hivex	0:1.3.10-6.11.el7_9

Vulnerabilities 1

Unscored —

CVE-2021-3504

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the …

hivex hivex hivex hivex Debian Ubuntu Azure Linux Alpine

May 11, 2021