USN-5148-1: hivex vulnerability

Releases

• Ubuntu 21.10
• Ubuntu 21.04
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• hivex - utilities for reading and writing Windows Registry hives

Details

It was discovered that hivex incorrectly handled certain input. An attacker
could use this vulnerability to cause a crash or obtain sensitive information.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 21.10

• libhivex-bin - 1.3.19-1ubuntu3.21.10.1
• libhivex0 - 1.3.19-1ubuntu3.21.10.1

Ubuntu 21.04

• libhivex-bin - 1.3.19-1ubuntu3.21.04.1
• libhivex0 - 1.3.19-1ubuntu3.21.04.1

Ubuntu 20.04

• libhivex-bin - 1.3.18-2ubuntu0.1
• libhivex0 - 1.3.18-2ubuntu0.1

Ubuntu 18.04

• libhivex-bin - 1.3.15-1ubuntu0.1
• libhivex0 - 1.3.15-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2021-3504

Related notices

• USN-5148-2: libhivex-dev, python3-hivex, libwin-hivex-perl, libhivex-ocaml-dev, hivex, python-hivex, libhivex-bin, libhivex0, libhivex-ocaml, ruby-hivex