Medium
Security advisory
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-3622
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:37 UTC · Revision 1
Source evidence
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
osv:CVE-2021-3622
Complete source record
{
"id": "931c6eb9e3878da9facc9f4c2db1cf90a6e1a9576af0af69967c6d17cede2b42",
"url": "https://osv.dev/vulnerability/CVE-2021-3622",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-3622",
"summary": "A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.",
"evidence": "osv:CVE-2021-3622",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2021-3622",
"aliases": [
"CVE-2021-3622"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/libguestfs/hivex",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "ace0be49b52943240f6c461e31e84f104b8ef443"
},
{
"fixed": "771728218dac2fbf6997a7e53225e75a4c6b7255"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:redhat:hivex:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.3.21"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "771728218dac2fbf6997a7e53225e75a4c6b7255"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v1.3.20",
"v1.3.19",
"1.3.19",
"v1.3.18",
"v1.3.17",
"v1.3.16",
"v1.3.15",
"v1.3.14",
"1.3.10",
"1.3.13",
"1.3.12",
"1.3.11",
"1.3.9",
"1.3.8",
"1.3.7",
"1.3.6",
"1.3.5",
"1.3.4",
"1.3.3",
"1.3.2",
"1.3.1",
"1.3.0",
"1.2.8",
"1.2.7",
"1.2.6",
"1.2.5",
"1.2.4",
"1.2.3",
"1.2.2",
"1.2.1",
"1.2.0",
"1.1.2",
"1.1.1",
"1.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3622.json",
"vanir_signatures": [
{
"id": "CVE-2021-3622-066ab8c3",
"digest": {
"length": 2324,
"function_hash": "138394577735161663126852814952112072419"
},
"source": "https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255",
"target": {
"file": "lib/node.c",
"function": "_get_children"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-3622-5c7db85f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"74309310395030575337290169571303175705",
"233451100487387596963065481564458646252",
"87209965537219425312944453589324538996",
"75759970310467413331686537479272587427",
"325938084959474812814722037016182574393",
"55030333524285549612708431989715222969",
"189692135388723762671179049222014938680",
"268347765392776722820548116078944858468",
"68860408180380056120812084260736257586",
"101506122728373862828355737642028729389",
"261104001740472006705787271478211920945",
"102517267821207842162073957347805317418",
"277520334333955264787363960026410344983",
"131722666974530336955358580486147791888",
"154045439088021880170804602014951719044",
"183394433316313172637662585870132332815"
]
},
"source": "https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255",
"target": {
"file": "lib/node.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-3622-c3d94877",
"digest": {
"length": 1790,
"function_hash": "171072671982664405333538485700709584878"
},
"source": "https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255",
"target": {
"file": "lib/node.c",
"function": "_hivex_get_children"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:04:48Z"
}
}
],
"modified": "2026-10-20T14:04:48.305853702Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S35TVTAPHORSUIFYNFBHKLQRPVFUPXBE/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/USD4OEV6L3RPHE32V2MJ4JPFBODINWSU/",
"https://bugzilla.redhat.com/show_bug.cgi?id=1975489",
"https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255",
"https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "33"
},
{
"last_affected": "33"
},
{
"introduced": "34"
},
{
"last_affected": "34"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
},
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2021-3622",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388534,
"published_at": "2021-12-23T21:15:08.97+00:00"
}