SB2025082911 - Ubuntu update for aide

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025082911

SB2025082911 - Ubuntu update for aide

Published: August 29, 2025

Security Bulletin ID SB2025082911
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Improper Encoding or Escaping of Output (CVE-ID: CVE-2025-54389)

The vulnerability allows a remote attacker to bypass detection rules.

The vulnerability exists due to improper input validation when handling file names. A remote attacker can pass a specially crafted file to the application and hide or remove the file from the logs or bypass AIDE detection of malicious files.


2) NULL pointer dereference (CVE-ID: CVE-2025-54409)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma.


Remediation

Install update from vendor's website.

References