VDB
DEBIAN-CVE-2025-54409
DEBIAN-CVE-2025-54409
PUBLISHED
CVSS 5.5 MEDIUM
AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | aide | 0, 0.18.3-1, 0.18.3-1+deb12u1 |
| Debian:13 | aide | 0, 0.19.1-2, 0 |
| Debian:11 | aide | 0, 0.17.3-4, 0.17.3-4+deb11u1 |
| Debian:14 | aide | 0, 0.19.1-2, 0 |
Timeline
- Aug 14, 2025 CVE Published
- Apr 28, 2026 CVE Updated