Ubuntu 21.10 & 20.04 LTS: USN-5148-1 Moderate: Hivex Information Leak

ubuntu

November 16, 2021

hivex could be made to crash or leak information if it received specially crafted input.

Summary

hivex could be made to crash or leak information if it received specially

crafted input.

Software Description:

- hivex: utilities for reading and writing Windows Registry hives

Details:

It was discovered that hivex incorrectly handled certain input. An attacker

could use this vulnerability to cause a crash or obtain sensitive information.

Topics Covered

security advisory security issue information leak Ubuntu update instructions crash hivex

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  libhivex-bin                    1.3.19-1ubuntu3.21.10.1
  libhivex0                       1.3.19-1ubuntu3.21.10.1

Ubuntu 21.04:
  libhivex-bin                    1.3.19-1ubuntu3.21.04.1
  libhivex0                       1.3.19-1ubuntu3.21.04.1

Ubuntu 20.04 LTS:
  libhivex-bin                    1.3.18-2ubuntu0.1
  libhivex0                       1.3.18-2ubuntu0.1

Ubuntu 18.04 LTS:
  libhivex-bin                    1.3.15-1ubuntu0.1
  libhivex0                       1.3.15-1ubuntu0.1

In general, a standard system update will make all the necessary changes.