Red Hat Hivex vulnerabilities

2 CVEs affecting Red Hat Hivex, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3622, published 2021-12-23.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3622, published 2021-12-23. Medium severity, CVSS 4.3. EPSS: 5.2% chance of exploitation in the next 30 days. A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children()…
• CVE-2021-3504, published 2021-05-11. Medium severity, CVSS 5.4. EPSS: 1.9% chance of exploitation in the next 30 days. A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows…