Home

CVE-2021-45417

Description

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.038

Associated Vulnerability

VulnerabilityOS Platform
aide security update(DSA-5051-1) aide_0.16.1-1+deb10u1_i386.debLinux
aide security update(DSA-5051-1) aide_0.16.1-1+deb10u1_amd64.debLinux
aide security update(DSA-5051-1) aide_0.17.3-4+deb11u1_amd64.debLinux
Advanced Intrusion Detection Environment (USN-5243-1) aide_0.16-3ubuntu0.1_i386.debLinux
Advanced Intrusion Detection Environment (USN-5243-1) aide_0.16-3ubuntu0.1_amd64.debLinux
Advanced Intrusion Detection Environment (USN-5243-1) aide_0.16.1-1ubuntu0.1_amd64.debLinux
Advanced Intrusion Detection Environment (USN-5243-1) aide_0.17.3-1ubuntu0.1_amd64.debLinux
Advanced Intrusion Detection Environment (USN-5243-1) aide_0.17.3-4ubuntu0.1_amd64.debLinux
(RHSA-2022:0441) aide security update aide-0.16-14.el8_5.1.x86_64.rpmLinux
(RHSA-2022:0441) aide security update aide-debugsource-0.16-14.el8_5.1.x86_64.rpmLinux
Aide update (ELSA-2022-0441) aide-0.16-14.el8_5.1.x86_64.rpmLinux
(RHSA-2022:0473) aide security update aide-0.15.1-13.el7_9.1.x86_64.rpmLinux
Aide update (ELSA-2022-0473) aide-0.15.1-13.0.1.el7_9.1.x86_64.rpmLinux
SUSE-SU-2022:0145-1(SUSE Linux Enterprise Server 12-SP5 ) aide-0.16-20.15.1.x86_64.rpmLinux
SUSE-SU-2022:0145-1(SUSE Linux Enterprise Server 12-SP5 ) aide-debuginfo-0.16-20.15.1.x86_64.rpmLinux
SUSE-SU-2022:0145-1(SUSE Linux Enterprise Server 12-SP5 ) aide-debugsource-0.16-20.15.1.x86_64.rpmLinux
aide security update (RLSA-2022:441) aide-0.16-14.el8_5.1.x86_64.rpmLinux
aide security update (RLSA-2022:0441) aide-0.16-14.el8_5.1.x86_64.rpmLinux
SUSE-SU-2022:0150-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) aide-0.16-24.1.x86_64_15_SP3.rpmLinux
SUSE-SU-2022:0150-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) aide-debuginfo-0.16-24.1.x86_64_15_SP3.rpmLinux
SUSE-SU-2022:0150-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) aide-debugsource-0.16-24.1.x86_64_15_SP3.rpmLinux
(RHSA-2022:0441)Important: security update aide-debuginfo-0.16-14.el8_5.1.x86_64.rpmLinux
(RHSA-2022:0473)Important: security update aide-debuginfo-0.15.1-13.el7_9.1.x86_64.rpmLinux
aide security update(DSA-5051-1) aide_0.17.3-4+deb11u1_i386.debLinux
aide Security Update (ALAS-2022-1850) aide-0.16.2-1.amzn2.0.2.x86_64.rpmLinux
Important: aide security update aide-0.16-14.el8_5.1.x86_64.rpmLinux
aide Security Update (ALAS2-2022-1850) aide-0.16.2-1.amzn2.0.2.x86_64.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2021-45417)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234