p PatchFirst

CVE-2025-54409

CVE-2025-54409 · AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.

CVSS 6.2 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • aide

    Versions
    • >= 0.13, < 0.19.2: Affected

    No fix published

  • aide Debian:12

    Versions
    • 0.18.3-1
    • 0.18.3-1+deb12u1
    • 0.18.3-1+deb12u2
    • 0.18.3-1+deb12u3
    Affected ranges
    • ECOSYSTEM: < 0.18.3-1+deb12u4

    Update to 0.18.3-1+deb12u4

  • aide Debian:13

    Versions
    • 0.19.1-2
    Affected ranges
    • ECOSYSTEM: < 0.19.1-2+deb13u1

    Update to 0.19.1-2+deb13u1

  • aide Debian:14

    Versions
    • 0.19.1-2
    Affected ranges
    • ECOSYSTEM: < 0.19.2-1

    Update to 0.19.2-1

  • aide Ubuntu:Pro:14.04:LTS

    Versions
    • 0.15.1-8ubuntu2
    • 0.16~a2.git20130520-2
    • 0.16~a2.git20130520-2ubuntu0.1
    • 0.16~a2.git20130520-2ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: < 0.16~a2.git20130520-2ubuntu0.1+esm2

    Update to 0.16~a2.git20130520-2ubuntu0.1+esm2

  • aide Ubuntu:Pro:16.04:LTS

    Versions
    • 0.16~a2.git20130520-3
    • 0.16~a2.git20130520-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: < 0.16~a2.git20130520-3ubuntu0.1~esm2

    Update to 0.16~a2.git20130520-3ubuntu0.1~esm2

  • aide Ubuntu:Pro:18.04:LTS

    Versions
    • 0.16-1
    • 0.16-2
    • 0.16-3
    • 0.16-3ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 0.16-3ubuntu0.1+esm1

    Update to 0.16-3ubuntu0.1+esm1

  • aide Ubuntu:Pro:20.04:LTS

    Versions
    • 0.16.1-1build2
    • 0.16.1-1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 0.16.1-1ubuntu0.1+esm1

    Update to 0.16.1-1ubuntu0.1+esm1

  • aide Ubuntu:22.04:LTS

    Versions
    • 0.17.3-4build1
    • 0.17.3-5
    • 0.17.4-1
    • 0.17.4-1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 0.17.4-1ubuntu0.2

    Update to 0.17.4-1ubuntu0.2

  • aide Ubuntu:24.04:LTS

    Versions
    • 0.18.5-1
    • 0.18.6-2
    • 0.18.6-2build1
    • 0.18.6-2build2
    Affected ranges
    • ECOSYSTEM: < 0.18.6-2ubuntu0.1

    Update to 0.18.6-2ubuntu0.1

Original sources

Check your server →