CVE-2021-3622 in Red Hat and Fedora Project Products
Published on December 23, 2021
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
Weakness Type
What is a Resource Exhaustion Vulnerability?
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
CVE-2021-3622 has been classified to as a Resource Exhaustion vulnerability or weakness.
Products Associated with CVE-2021-3622
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-3622 are published in these products:
Exploit Probability
EPSS
0.58%
Percentile
68.56%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.