SB2025082911 - Ubuntu update for aide

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025082911

SB2025082911 - Ubuntu update for aide

Published: August 29, 2025

Security Bulletin ID SB2025082911
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Improper Encoding or Escaping of Output (CVE-ID: CVE-2025-54389)

CWE-ID: CWE-116 - Improper Encoding or Escaping of Output

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to bypass detection rules.

The vulnerability exists due to improper input validation when handling file names. A remote attacker can pass a specially crafted file to the application and hide or remove the file from the logs or bypass AIDE detection of malicious files.


2) NULL pointer dereference (CVE-ID: CVE-2025-54409)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma.


Remediation

Install update from vendor's website.

References