CVE-2021-45417

A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could crash the program and possibly execute arbitrary code through large 16k extended file attributes or ACL...

Huawei EulerOS: Security Advisory for aide (EulerOS-SA-2022-1556)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : aide (EulerOS-SA-2022-1556)

According to the versions of the aide package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of...

Huawei EulerOS: Security Advisory for aide (EulerOS-SA-2022-1442)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : aide (EulerOS-SA-2022-1421)

According to the versions of the aide package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of...

EulerOS 2.0 SP9 : aide (EulerOS-SA-2022-1442)

According to the versions of the aide package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of...

aide: heap-based buffer overflow on outputs larger than B64_BUF

A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could crash the program and possibly execute arbitrary code through large 16k extended file attributes or ACL...

AlmaLinux 8 : aide (ALSA-2022:0441)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:0441 advisory. - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based...

openSUSE: Security Advisory for aide (openSUSE-SU-2022:0150-2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

aide security update

0.14-11.0.1 - precalculate buffer size in base64 functions Orabug: 33835910CVE-2021-45417...

Oracle Linux 6 : aide (ELSA-2022-9165)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9165 advisory. 0.14-11.0.1 - precalculate buffer size in base64 functions Orabug: 33835910CVE-2021-45417 Tenable has extracted the preceding description block directly from th...

SUSE SLES15 Security Update : aide (SUSE-SU-2022:0150-2)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:0150-2 advisory. - CVE-2021-45417: Fix a bufferoverflow in base64 functions bsc1194735 Tenable has extracted the preceding description block directly from the SUSE...

Security update for aide (important)

openSUSE Security Update: Security update for aide Announcement ID: openSUSE-SU-2022:0150-2 Rating: important References: 1194735 Cross-References: CVE-2021-45417 CVSS scores: CVE-2021-45417 SUSE: 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4 An update that...

Oracle Linux 8 : aide (ELSA-2022-0441)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-0441 advisory. 0.16.14.1 - backported fix for CVE-2021-45417 resolves: rhbz2041956 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 7 : aide (ELSA-2022-0473)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-0473 advisory. 0.15.1-13.0.1 - Fix sha256 and sha512 output length Orabug: 30820565 0.15.1.1 - backported fix for CVE-2021-45417 resolves: rhbz2041952 Tenable has extracted th...

aide: heap-based buffer overflow on outputs larger than B64_BUF

A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could crash the program and possibly execute arbitrary code through large 16k extended file attributes or ACL...

RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.10-1] (Important) (RHSA-2022:0540)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0540 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...

CentOS: Security Advisory for aide (CESA-2022:0473)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 6 : aide (RHSA-2022:0472)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0472 advisory. Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file...

Rocky Linux 8 : aide (RLSA-2022:441)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:441 advisory. - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based...