A security issue was found in the hivex library before version 1.3.21. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to recursively call the _get_children() function, ultimately leading to a stack overflow.
A security issue was found in the hivex library before version 1.3.21. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to recursively call the _get_children() function, ultimately leading to a stack overflow.
https://bugzilla.redhat.com/show_bug.cgi?id=1975489 https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255
Vulmon