Lucene search
K

8 matches found

RedHat Linux
RedHat Linux
added 2025/09/02 11:18 a.m.4 views

aide: improper output neutralization enables bypassing

A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...

6.2CVSS7.3AI score0.0021EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2025/09/02 7:30 a.m.4 views

aide: improper output neutralization enables bypassing

A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...

6.2CVSS7.3AI score0.0021EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/08/16 4:11 p.m.5 views

CVE-2025-54389

A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...

7.1CVSS5.7AI score0.0021EPSS
Exploits1References3
OSV
OSV
added 2025/08/14 4:15 p.m.5 views

AZL-66434 CVE-2025-54389 affecting package aide for versions less than 0.16-17

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

6.2CVSS6.7AI score0.0021EPSS
Exploits1References1
OSV
OSV
added 2025/08/14 4:15 p.m.1 views

DEBIAN-CVE-2025-54389

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

5.5CVSS7.6AI score0.0021EPSS
Exploits1References1
NVD
NVD
added 2025/08/14 4:15 p.m.3 views

CVE-2025-54389

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

6.2CVSS0.0021EPSS
Exploits1References5
Debian
Debian
added 2025/08/14 3:26 p.m.8 views

[SECURITY] [DLA 4272-1] aide security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4272-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 14, 2025 https://wiki.debian.org/LTS -...

6.2CVSS7.1AI score0.00216EPSS
Exploits2
Debian
Debian
added 2025/08/14 2:31 p.m.8 views

[SECURITY] [DSA 5977-1] aide security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2025 https://www.debian.org/security/faq -...

6.2CVSS7.1AI score0.00216EPSS
Exploits2
Rows per page
Query Builder