CVE-2014-9273

Medium

Description

lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.

SeverityMedium
CVSS4.6
Exploit probability—
ProductDebian Hivex
PublishedDec 8, 2014
First seenDec 8, 2014

How to fix

Affected products

ProductAffected versionsFixed in
debian hivexv ≤ 1.3.10-2—
opensuse opensuse13.1, 13.2—
redhat enterprise_linux_desktop6.0, 7.0—
redhat enterprise_linux_hpc_node6.0—
redhat enterprise_linux_server6.0, 7.0—
redhat enterprise_linux_workstation6.0, 7.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.