aide-0.15.1-13.el7.1

エラータID: AXSA:2022-3059:02

Release date: 
Wednesday, February 9, 2022 - 05:46
Subject: 
aide-0.15.1-13.el7.1
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Advanced Intrusion Detection Environment (AIDE) is a utility that creates a
database of files on the system, and then uses that database to ensure file
integrity and detect system intrusions.

Security Fix(es):

* aide: heap-based buffer overflow on outputs larger than B64_BUF
(CVE-2021-45417)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file
metadata (such as XFS extended attributes or tmpfs ACLs), because of a
heap-based buffer overflow.

Solution: 

Update packages.

CVEs: 
CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
Additional Info: 

N/A

Download: 

SRPMS
  1. aide-0.15.1-13.el7.1.src.rpm
    MD5: 9dd26db9bd534cca05651bf1ed3cff68
    SHA-256: ef5572f87c67d9ccab5dff710912d44d319212c8a35a0859b5a248c5832b1956
    Size: 442.41 kB

Asianux Server 7 for x86_64
  1. aide-0.15.1-13.el7.1.x86_64.rpm
    MD5: 58d9dc5478f98b8af006237681a06c32
    SHA-256: 82e6c66d94726f27d7f04b42276dfd7e04ba703cc2cffc3ca52f65a248ddc60c
    Size: 132.39 kB