CVE-2021-45417
Fixed in a distro release EPSS <1%
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
Products: advanced_intrusion_detection_environment_project advanced_intrusion_detection_environment, redhat ovirt-node, redhat virtualization_host, redhat enterprise_linux, fedoraproject fedora, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | aide | 0.16-14.el8_5.1 |
| Amazon Linux 2 | aide | 0.16.2-1.amzn2.0.2 |
| Debian 10 | aide | 0.16.1-1+deb10u1 |
| Debian 11 | aide | 0.17.3-4+deb11u1 |
| Debian 12 | aide | 0.17.4-1 |
| Debian 13 | aide | 0.17.4-1 |
| Debian 14 | aide | 0.17.4-1 |
| Debian 9 | aide | 0.16-1+deb9u1 |
| Red Hat Enterprise Linux 7 | aide | 0:0.15.1-13.el7_9.1 |
| Red Hat Enterprise Linux 7 | aide-debuginfo | 0:0.15.1-13.el7_9.1 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host | 0:4.3.22-20220330.1.el7_9 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update | 0:4.3.22-20220330.1.el7_9 |
| Red Hat Enterprise Linux 8 | aide | 0:0.16-14.el8_5.1 |
| Red Hat Enterprise Linux 8 | aide-debuginfo | 0:0.16-14.el8_5.1 |
| Red Hat Enterprise Linux 8 | aide-debugsource | 0:0.16-14.el8_5.1 |
| Red Hat rhel e4s 8.1 | aide | 0:0.16-11.el8_1.1 |
| Red Hat rhel e4s 8.1 | aide-debuginfo | 0:0.16-11.el8_1.1 |
| Red Hat rhel e4s 8.1 | aide-debugsource | 0:0.16-11.el8_1.1 |
| Red Hat rhel els 6 | aide | 0:0.14-11.el6_10.1 |
| Red Hat rhel els 6 | aide-debuginfo | 0:0.14-11.el6_10.1 |
| Red Hat rhel eus 8.2 | aide | 0:0.16-11.el8_2.1 |
| Red Hat rhel eus 8.2 | aide-debuginfo | 0:0.16-11.el8_2.1 |
| Red Hat rhel eus 8.2 | aide-debugsource | 0:0.16-11.el8_2.1 |
| Red Hat rhel eus 8.4 | aide | 0:0.16-14.el8_4.1 |
| Red Hat rhel eus 8.4 | aide-debuginfo | 0:0.16-14.el8_4.1 |
| Red Hat rhel eus 8.4 | aide-debugsource | 0:0.16-14.el8_4.1 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.4.10-202202081536_8.5 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.4.10-202202081536_8.5 |
| Rocky Linux 8 | aide | 0:0.16-14.el8_5.1 |
| SUSE Enterprise Storage 6 | aide | 0.16-24.1 |
| SUSE Enterprise Storage 7 | aide | 0.16-24.1 |
| SUSE HPE Helion OpenStack 8 | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | aide | 0.16-24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | aide | 0.16-24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | aide | 0.16-24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | aide | 0.16-24.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | aide | 0.16-24.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | aide | 0.16-24.1 |
| SUSE Linux Enterprise Micro 5.1 | aide | 0.16-24.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | aide | 0.16-24.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | aide | 0.13.1-40.16.6.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | aide | 0.13.1-40.16.6.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server 12 SP5 | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server 15-LTSS | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | aide | 0.16-20.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | aide | 0.16-24.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | aide | 0.16-24.1 |
| SUSE Manager Proxy 4.1 | aide | 0.16-24.1 |
| SUSE Manager Retail Branch Server 4.1 | aide | 0.16-24.1 |
| SUSE Manager Server 4.1 | aide | 0.16-24.1 |
| SUSE OpenStack Cloud 8 | aide | 0.16-20.15.1 |
| SUSE OpenStack Cloud 9 | aide | 0.16-20.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | aide | 0.16-20.15.1 |
| SUSE OpenStack Cloud Crowbar 9 | aide | 0.16-20.15.1 |
| Ubuntu 18.04 LTS | aide | 0.16-3ubuntu0.1 |
| Ubuntu 20.04 LTS | aide | 0.16.1-1ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | aide | 0.16~a2.git20130520-2ubuntu0.1+esm1 |
| Ubuntu Pro 16.04 LTS | aide | 0.16~a2.git20130520-3ubuntu0.1~esm1 |
| openSUSE Leap 15.3 | aide | 0.16-24.1 |
| openSUSE Leap 15.3 | seamonkey | 2.53.12-lp153.17.8.2 |
| openSUSE Tumbleweed | aide | 0.17.4-1.1 |