安全公告/【CVE-2021-3622】
基本信息
受影响操作系统:Asianux
危险等级:中危
影响源码包:virt:rhel
CVSS评分:4.3
发现日期:2022-11-22
修复版本:libvirt-8.0.0-5.module+718+4fb2a56d.01
漏洞描述
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
漏洞判定
执行命令yum info PackageName获取软件包版本号，版本小于修复版本，则受此漏洞影响，版本大于等于修复版本，则此漏洞已修复
修复方式
yum update PackageName