CVE-2014-9273
Fixed in a distro release EPSS <1%
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
Products: opensuse, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian hivex
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | hivex | 1.3.11-1 |
| Debian 13 | hivex | 1.3.11-1 |
| Debian 14 | hivex | 1.3.11-1 |
| Red Hat Enterprise Linux 6 | hivex | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 6 | hivex-debuginfo | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 6 | hivex-devel | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 6 | ocaml-hivex | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 6 | ocaml-hivex-devel | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 6 | perl-hivex | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 6 | python-hivex | 0:1.3.3-4.3.el6 |
| Red Hat Enterprise Linux 7 | hivex | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | hivex-debuginfo | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | hivex-devel | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | ocaml-hivex | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | ocaml-hivex-devel | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | perl-hivex | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | python-hivex | 0:1.3.10-5.7.el7 |
| Red Hat Enterprise Linux 7 | ruby-hivex | 0:1.3.10-5.7.el7 |
| SUSE Linux Enterprise Server 12 | hivex | 1.3.10-4.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | hivex | 1.3.10-4.1 |
| SUSE Linux Enterprise Software Development Kit 12 | hivex | 1.3.10-4.1 |