https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:09:09 +0000 https://cve.radiocsirt.org/vuln/cve-2025-54409 <p><strong>Affected:</strong> aide</p> <p>AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.</p> <p><strong>Affected:</strong> aide</p> <p>AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.</p> https://cve.radiocsirt.org/vuln/cve-2025-54409 https://cve.radiocsirt.org/vuln/usn-7697-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: aide, Ubuntu:Pro:16.04:LTS: aide, Ubuntu:Pro:18.04:LTS: aide, Ubuntu:Pro:20.04:LTS: aide, Ubuntu:22.04:LTS: aide, Ubuntu:24.04:LTS: aide</p> <p>Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious files. (CVE-2025-54389)</p> <p>Rajesh Pangare discovered that AIDE incorrectly handled extended file attributes. A local attacker could possibly use this issue to cause a denial of service. (CVE-2025-54409)</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: aide, Ubuntu:Pro:16.04:LTS: aide, Ubuntu:Pro:18.04:LTS: aide, Ubuntu:Pro:20.04:LTS: aide, Ubuntu:22.04:LTS: aide, Ubuntu:24.04:LTS: aide</p> <p>Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious files. (CVE-2025-54389)</p> <p>Rajesh Pangare discovered that AIDE incorrectly handled extended file attributes. A local attacker could possibly use this issue to cause a denial of service. (CVE-2025-54409)</p> https://cve.radiocsirt.org/vuln/usn-7697-1