Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2022:0441

Опубликовано: 07 фев. 2022
Источник: rocky
Оценка: Important

Описание

Important: aide security update

Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.

Security Fix(es):

  • aide: heap-based buffer overflow on outputs larger than B64_BUF (CVE-2021-45417)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
aidex86_6414.el8_5.1aide-0.16-14.el8_5.1.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 3 лет назад

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

CVSS3: 7.5
redhat
больше 3 лет назад

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

CVSS3: 7.8
nvd
больше 3 лет назад

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

CVSS3: 7.8
debian
больше 3 лет назад

AIDE before 0.17.4 allows local users to obtain root privileges via cr ...

suse-cvrf
больше 3 лет назад

Security update for aide