https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:11:00.373110+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-54409 CVE-2025-54409 — AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS) 2026-10-05T13:11:00.409016+00:00

Affected: aide

AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.

 https://cve.radiocsirt.org/vuln/usn-7697-1 USN-7697-1 — aide vulnerabilities 2026-10-05T13:11:00.409091+00:00

Affected: Ubuntu:Pro:14.04:LTS: aide, Ubuntu:Pro:16.04:LTS: aide, Ubuntu:Pro:18.04:LTS: aide, Ubuntu:Pro:20.04:LTS: aide, Ubuntu:22.04:LTS: aide, Ubuntu:24.04:LTS: aide

Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious files. (CVE-2025-54389)

Rajesh Pangare discovered that AIDE incorrectly handled extended file attributes. A local attacker could possibly use this issue to cause a denial of service. (CVE-2025-54409)