Unrated severityNVD Advisory· Published Dec 8, 2014· Updated May 6, 2026
CVE-2014-9273
CVE-2014-9273
Description
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
Affected products
13cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- osv-coords3 versionspkg:rpm/suse/hivex&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/hivex&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/hivex&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012
< 1.3.10-4.1+ 2 more
- (no CPE)range: < 1.3.10-4.1
- (no CPE)range: < 1.3.10-4.1
- (no CPE)range: < 1.3.10-4.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- github.com/libguestfs/hivex/commit/357f26fa64fd1d9ccac2331fe174a8ee9c607adbnvdExploitIssue TrackingPatch
- github.com/libguestfs/hivex/commit/4bbdf555f88baeae0fa804a369a81a83908bd705nvdExploitIssue TrackingPatch
- lists.opensuse.org/opensuse-updates/2015-02/msg00005.htmlnvdThird Party Advisory
- rhn.redhat.com/errata/RHSA-2015-0301.htmlnvdThird Party Advisory
- rhn.redhat.com/errata/RHSA-2015-1378.htmlnvdThird Party Advisory
- www.openwall.com/lists/oss-security/2014/11/25/6nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2014/12/04/14nvdMailing ListThird Party Advisory
- www.redhat.com/archives/libguestfs/2014-October/msg00235.htmlnvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- secunia.com/advisories/62792nvd
- www.securityfocus.com/bid/71279nvd
- security.gentoo.org/glsa/201503-07nvd
News mentions
0No linked articles in our index yet.