aide-0.16-14.el8.1
エラータID: AXSA:2022-3054:01
Release date:
Monday, February 7, 2022 - 08:51
Subject:
aide-0.16-14.el8.1
Affected Channels:
Asianux Server 8 for x86_64
Severity:
High
Description:
Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.
Security Fix(es):
* aide: heap-based buffer overflow on outputs larger than B64_BUF (CVE-2021-45417)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
Solution:
Update packages.
CVEs:
CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
Additional Info:
N/A
Download:
SRPMS
- aide-0.16-14.el8.1.src.rpm
MD5: d3ded2d9f4e6dca293459fe8d5caad91
SHA-256: a64ece945a1368150e6bebdc49fbb47e922a4bf5a506e627215419df9ec4cb43
Size: 419.30 kB
Asianux Server 8 for x86_64
- aide-0.16-14.el8.1.x86_64.rpm
MD5: f54d71c1c910db571293e66214c4c73d
SHA-256: 078c07ccad8651c5cdddd26d1ad33cbfdb62f9dcee5598ddc569c77caa573674
Size: 155.38 kB