Vulnerability · Published May 11, 2021 · Assigned by redhat
CVE-2021-3504
Medium 5.4
In plain English
A medium-severity out-of-bounds read in hivex. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)1.8%top 20.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libguestfs-winsupport | 8.2-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | libiscsi | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | libiscsi | 1.18.0-8.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | libiscsi-devel | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | libiscsi-devel | 1.18.0-8.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | libiscsi-utils | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | libiscsi-utils | 1.18.0-8.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | libnbd | 1.2.2-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | libnbd-devel | 1.2.2-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | libvirt-dbus | 1.3.0-2.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | libvirt-dbus | 1.3.0-2.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdfuse | 1.2.2-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-bash-completion | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-basic-filters | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-basic-plugins | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-curl-plugin | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-devel | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-example-plugins | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-gzip-plugin | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-linuxdisk-plugin | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-python-plugin | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-server | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-ssh-plugin | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-vddk-plugin | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | nbdkit-xz-filter | 1.16.2-4.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | netcf | 0.2.8-12.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | netcf | 0.2.8-12.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | netcf-devel | 0.2.8-12.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | netcf-devel | 0.2.8-12.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | netcf-libs | 0.2.8-12.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | netcf-libs | 0.2.8-12.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | perl-Sys-Virt | 6.0.0-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | python3-libnbd | 1.2.2-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | python3-libvirt | 6.0.0-1.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | seabios | 1.13.0-2.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | seabios-bin | 1.13.0-2.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | seavgabios-bin | 1.13.0-2.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | sgabios | 1:0.20170427git-3.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | sgabios | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | sgabios-bin | 1:0.20170427git-3.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | sgabios-bin | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 | ALSA-2021:3061 |
| AlmaLinux:8 | supermin | 5.1.19-10.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| AlmaLinux:8 | supermin-devel | 5.1.19-10.module_el8.5.0+2608+72063365 | ALSA-2021:3061 |
| Alpine:v3.20 | hivex | 1.3.19-r2 | ALPINE-CVE-2021-3504 |
| Alpine:v3.21 | hivex | 1.3.19-r2 | ALPINE-CVE-2021-3504 |
| Alpine:v3.22 | hivex | 1.3.19-r2 | ALPINE-CVE-2021-3504 |
| Alpine:v3.23 | hivex | 1.3.19-r2 | ALPINE-CVE-2021-3504 |
| Alpine:v3.24 | hivex | 1.3.19-r2 | ALPINE-CVE-2021-3504 |
| Debian:12 | hivex | 1.3.20-1 | DEBIAN-CVE-2021-3504 |
| Debian:13 | hivex | 1.3.20-1 | DEBIAN-CVE-2021-3504 |
| Debian:14 | hivex | 1.3.20-1 | DEBIAN-CVE-2021-3504 |
| Rocky Linux:8 | hivex | 0:1.3.18-21.module+el8.4.0+642+7e26f5e1 | RLSA-2021:3061 |
| Rocky Linux:8 | hivex | 0:1.3.18-21.module+el8.5.0+670+c4aa478c | RLSA-2021:3061 |
| Rocky Linux:8 | libguestfs | 1:1.40.2-27.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | libguestfs-winsupport | 0:8.2-1.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.7.0+1084+97b81f61 | RLSA-2021:3061 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | libiscsi | 0:1.18.0-8.module+el8.6.0+847+b490afdd | RLSA-2021:3061 |
| Rocky Linux:8 | libnbd | 0:1.2.2-1.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | libvirt | 0:6.0.0-35.1.module+el8.4.0+642+7e26f5e1 | RLSA-2021:3061 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.7.0+1084+97b81f61 | RLSA-2021:3061 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | libvirt-dbus | 0:1.3.0-2.module+el8.6.0+847+b490afdd | RLSA-2021:3061 |
| Rocky Linux:8 | libvirt-python | 0:6.0.0-1.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | nbdkit | 0:1.16.2-4.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.6.0+847+b490afdd | RLSA-2021:3061 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | netcf | 0:0.2.8-12.module+el8.7.0+1084+97b81f61 | RLSA-2021:3061 |
| Rocky Linux:8 | perl-Sys-Virt | 0:6.0.0-1.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | qemu-kvm | 5:4.2.0-48.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | seabios | 0:1.13.0-2.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.6.0+847+b490afdd | RLSA-2021:3061 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Rocky Linux:8 | sgabios | 1:0.20170427git-3.module+el8.7.0+1084+97b81f61 | RLSA-2021:3061 |
| Rocky Linux:8 | supermin | 0:5.1.19-10.module+el8.4.0+534+4680a14e | RLSA-2021:3061 |
| Ubuntu:22.04:LTS | hivex | no fix listed | UBUNTU-CVE-2021-3504 |
| Ubuntu:24.04:LTS | hivex | no fix listed | UBUNTU-CVE-2021-3504 |
| Ubuntu:25.10 | hivex | no fix listed | UBUNTU-CVE-2021-3504 |
| Ubuntu:26.04:LTS | hivex | no fix listed | UBUNTU-CVE-2021-3504 |
| Ubuntu:26.10 | hivex | no fix listed | UBUNTU-CVE-2021-3504 |
Affected products (as reported)
Weakness: CWE-125
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1949687 x_refsource_MISC
- [debian-lts-announce] 20210511 [SECURITY] [DLA 2656-1] hivex security update mailing-list, x_refsource_MLIST
- FEDORA-2021-b71cc4df92 vendor-advisory, x_refsource_FEDORA
- FEDORA-2021-da76643229 vendor-advisory, x_refsource_FEDORA