{"id":"CVE-2021-45417","aliases":["ALSA-2022:0441","DEBIAN-CVE-2021-45417","DLA-2894-1","DSA-5051-1","EUVD-2021-32188","GHSA-gfm2-8gq5-m3x8","MGASA-2024-0100","OESA-2022-1523","RHSA-2022:0440","RHSA-2022:0441","RHSA-2022:0456","RHSA-2022:0464","RHSA-2022:0472","RHSA-2022:0473","RHSA-2022:0540","RHSA-2022:1263","RLSA-2022:0441","SUSE-SU-2022:0145-1","SUSE-SU-2022:0150-1","SUSE-SU-2022:0150-2","SUSE-SU-2022:14879-1","UBUNTU-CVE-2021-45417","USN-5243-1","USN-5243-2","openSUSE-SU-2022:0150-1","openSUSE-SU-2024:11960-1"],"status":"published","title":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00493,"percentile":0.42879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-01-20T00:00:00Z","modified":"2026-10-29T11:00:38Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"aide","fixed_in":["0.16-14.el8_5.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"aide","fixed_in":["0.17.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"aide","fixed_in":["0.17.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"aide","fixed_in":["0.17.4-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"aide","fixed_in":["0.16-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"aide","fixed_in":["0.16.1-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"aide","fixed_in":["0.17.3-4+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"aide","fixed_in":["0.18.6-1.mga9"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"mhash","fixed_in":["0.9.9.9-16.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"aide","fixed_in":["0.16.2-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"aide","fixed_in":["0.16.2-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"aide","fixed_in":["0.16.2-3.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"aide","fixed_in":["0:0.16-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"aide-debuginfo","fixed_in":["0:0.16-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"aide-debugsource","fixed_in":["0:0.16-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aide","fixed_in":["0:0.16-14.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aide-debuginfo","fixed_in":["0:0.16-14.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aide-debugsource","fixed_in":["0:0.16-14.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"aide","fixed_in":["0:0.16-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"aide-debuginfo","fixed_in":["0:0.16-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"aide-debugsource","fixed_in":["0:0.16-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"aide","fixed_in":["0:0.16-11.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"aide-debuginfo","fixed_in":["0:0.16-11.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"aide-debugsource","fixed_in":["0:0.16-11.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"aide","fixed_in":["0:0.14-11.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"aide-debuginfo","fixed_in":["0:0.14-11.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"aide","fixed_in":["0:0.15.1-13.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"aide-debuginfo","fixed_in":["0:0.15.1-13.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"aide","fixed_in":["0:0.15.1-13.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"aide-debuginfo","fixed_in":["0:0.15.1-13.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"aide","fixed_in":["0:0.15.1-13.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"aide-debuginfo","fixed_in":["0:0.15.1-13.el7_9.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"aide","fixed_in":["0:0.16-14.el8_5.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"aide","fixed_in":["0.16-20.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"aide","fixed_in":["0.13.1-40.16.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"aide","fixed_in":["0.13.1-40.16.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"aide","fixed_in":["0.16~a2.git20130520-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"aide","fixed_in":["0.16~a2.git20130520-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"aide","fixed_in":["0.16-3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"aide","fixed_in":["0.16.1-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"seamonkey","fixed_in":["2.53.12-lp153.17.8.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"aide","fixed_in":["0.16-24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"aide","fixed_in":["0.17.4-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-14.el8_5.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-1+deb9u1"}]}],"versions":["0.16-1"]},{"source":"osv","ecosystem":"Debian:10","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.1-1+deb10u1"}]}],"versions":["0.16.1-1"]},{"source":"osv","ecosystem":"Debian:11","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.3-4+deb11u1"}]}],"versions":["0.17.3-4"]},{"source":"osv","ecosystem":"Mageia:9","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.6-1.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"mhash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9.9-16.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-3.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"aide-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aide-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"aide-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-11.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-11.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"aide-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-11.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-11.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-11.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.1-13.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.1-13.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.1-13.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.1-13.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.1-13.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"aide-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.1-13.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.10-202202081536_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.10-202202081536_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.22-20220330.1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.22-20220330.1.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16-14.el8_5.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-20.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-40.16.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-40.16.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16~a2.git20130520-2ubuntu0.1+esm1"}]}],"versions":["0.15.1-8ubuntu2","0.16~a2.git20130520-2","0.16~a2.git20130520-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16~a2.git20130520-3ubuntu0.1~esm1"}]}],"versions":["0.16~a2.git20130520-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-3ubuntu0.1"}]}],"versions":["0.16-1","0.16-2","0.16-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.1-1ubuntu0.1"}]}],"versions":["0.16.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-3ubuntu0.1"}]}],"versions":["0.16-1","0.16-2","0.16-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.1-1ubuntu0.1"}]}],"versions":["0.16.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16~a2.git20130520-2ubuntu0.1+esm1"}]}],"versions":["0.15.1-8ubuntu2","0.16~a2.git20130520-2","0.16~a2.git20130520-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16~a2.git20130520-3ubuntu0.1~esm1"}]}],"versions":["0.16~a2.git20130520-3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.12-lp153.17.8.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"seamonkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.12-lp153.17.8.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16-24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"aide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-1.1"}]}]}],"products":[{"vendor":"advanced_intrusion_detection_environment_project","product":"advanced_intrusion_detection_environment"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"ovirt-node"},{"vendor":"redhat","product":"virtualization_host"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2022/01/20/3","tags":["x_transferred","Exploit","Mailing List","Mitigation","Patch","Third Party Advisory","fix","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/01/20/3","tags":["mailing-list","x_transferred","Exploit","Mailing List","Mitigation","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2022/dsa-5051","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/01/msg00024.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.ipi.fi/pipermail/aide/2022-January/001713.html","tags":["x_transferred","Exploit","Mailing List","Mitigation","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202311-07","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45417","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gfm2-8gq5-m3x8"},{"url":"https://errata.almalinux.org/8/ALSA-2022-0441.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-45417","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-45417","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0100.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29911","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5243-1","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0441","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1523","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0440","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041489","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0440.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45417","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0441.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0456","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0456.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0464","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0464.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0472","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0472.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0473","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0473.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0540","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2022-001","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040358","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0540.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4034","tags":["advisory"]},{"url":"https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4155","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0185","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2","tags":["article"]},{"url":"https://github.com/Crusaders-of-Rust/CVE-2022-0185","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/7","tags":["article"]},{"url":"https://www.willsroot.io/2022/01/cve-2022-0185.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1263","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2042404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062202","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1263.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0920","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0920","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbcf01128d0a92e131bd09f1688fe032480b65ca","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4028","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74","tags":["article"]},{"url":"https://lkml.org/lkml/2021/10/4/697","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4083","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4083","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0330","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/25/12","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0778","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20220315.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22942","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24407","tags":["advisory"]},{"url":"https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25235","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25235","tags":["advisory"]},{"url":"https://blog.hartwork.org/posts/expat-2-4-5-released/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25236","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25236","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25315","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25315","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0441","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220145-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194735","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45417","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220150-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220150-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214879-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-45417","tags":["report"]},{"url":"http://www.ipi.fi/pipermail/aide/2022-January/001714.html","tags":["report"]},{"url":"http://www.ipi.fi/pipermail/aide/2022-January/001713.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5243-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZEHXIWSI3LT73BE7YAXGYKT4HEXYVR3X/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-45417","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-20T00:00:00Z","modified":"2024-08-04T04:39:20.711Z","updated_at":"2026-11-02T14:33:02.580561Z"}],"euvd":[{"id":"EUVD-2021-32188","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-20T00:00:00Z","modified":"2024-08-04T04:39:20Z","updated_at":"2026-11-03T03:08:27.448176Z"}],"ghsa":[{"id":"GHSA-gfm2-8gq5-m3x8","title":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-21T00:00:41Z","modified":"2023-11-25T09:30:32Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:55:06.358976Z"}],"nvd":[{"id":"CVE-2021-45417","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-20T18:15:07.64Z","modified":"2026-06-17T04:13:20.993Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:03.821385Z"}],"osv":[{"id":"CVE-2021-45417","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-20T18:15:07.64Z","modified":"2026-10-24T10:30:56.226779731Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-45417","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-20T18:15:07.64Z","modified":"2026-10-23T18:04:56.953545659Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-1523","title":"aide security update","description":"AIDE (Advanced Intrusion Detection Environment) is a file and directory integrity checker. It creates a database from the regular expression rules that it finds from the config file(s). Once this database is initialized it can be used to verify the integrity of the files.\r\n\r\nSecurity Fix(es):\r\n\r\nAIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.(CVE-2021-45417)","status":"published","published":"2022-02-11T11:04:48Z","modified":"2026-08-18T01:15:39.106818912Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:0440","title":"Red Hat Security Advisory: aide security update","status":"published","published":"2024-09-13T17:34:04Z","modified":"2026-06-29T10:39:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0441","title":"Red Hat Security Advisory: aide security update","status":"published","published":"2024-09-13T17:33:55Z","modified":"2026-06-29T10:39:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0456","title":"Red Hat Security Advisory: aide security update","status":"published","published":"2024-09-13T17:33:11Z","modified":"2026-06-29T10:39:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0464","title":"Red Hat Security Advisory: aide security update","status":"published","published":"2024-09-13T17:34:07Z","modified":"2026-06-29T10:39:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0472","title":"Red Hat Security Advisory: aide security update","status":"published","published":"2024-09-13T17:33:29Z","modified":"2026-06-29T10:39:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0473","title":"Red Hat Security Advisory: aide security update","status":"published","published":"2024-09-13T17:33:22Z","modified":"2026-06-29T10:39:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0540","title":"Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.10-1]","status":"published","published":"2024-09-13T17:33:47Z","modified":"2026-08-07T10:05:00Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1263","title":"Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22","status":"published","published":"2024-09-30T16:27:48Z","modified":"2026-10-15T10:02:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2022:0441","title":"Important: aide security update","description":"Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.\n\nSecurity Fix(es):\n\n* aide: heap-based buffer overflow on outputs larger than B64_BUF (CVE-2021-45417)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-02-07T08:12:10Z","modified":"2026-02-05T03:00:11.43674Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-45417","description":"AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.","status":"published","published":"2022-01-20T14:00:00Z","modified":"2026-02-04T03:13:34.014835Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"ALSA-2022:0441","title":"Important: aide security update","description":"Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions.\n\nSecurity Fix(es):\n\n* aide: heap-based buffer overflow on outputs larger than B64_BUF (CVE-2021-45417)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-02-07T08:12:10Z","modified":"2026-10-29T11:00:38.323297798Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2894-1","title":"aide - security update","status":"published","published":"2022-01-24T00:00:00Z","modified":"2026-03-09T01:22:16.161629Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5051-1","title":"aide - security update","status":"published","published":"2022-01-20T00:00:00Z","modified":"2026-03-09T02:10:34.319156Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2024-0100","title":"Updated aide \u0026 mhash packages fix security vulnerability","description":"AIDE before 0.17.4 allows local users to obtain root privileges via\ncrafted file metadata (such as XFS extended attributes or tmpfs ACLs),\nbecause of a heap-based buffer overflow. (CVE-2021-45417)\n","status":"published","published":"2024-03-31T03:27:58Z","modified":"2026-04-16T04:44:04.288766085Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2022:0150-1","title":"Security update for aide","description":"This update for aide fixes the following issues:\n\n- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)\n","status":"published","published":"2022-01-21T10:24:56Z","modified":"2026-02-04T04:33:47.517469Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11960-1","title":"aide-0.17.4-1.1 on GA media","description":"These are all security issues fixed in the aide-0.17.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:59:43.498596Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:0145-1","title":"Security update for aide","description":"This update for aide fixes the following issues:\n\n- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)\n","status":"published","published":"2022-01-20T16:22:58Z","modified":"2026-02-04T03:25:04.131882Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0150-1","title":"Security update for aide","description":"This update for aide fixes the following issues:\n\n- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)\n","status":"published","published":"2022-01-21T10:26:05Z","modified":"2025-05-02T04:32:00.21246Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0150-2","title":"Security update for aide","description":"This update for aide fixes the following issues:\n\n- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)\n","status":"published","published":"2022-02-17T19:17:56Z","modified":"2026-02-04T02:28:40.603007Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:14879-1","title":"Security update for aide","description":"This update for aide fixes the following issues:\n\n- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)\n","status":"published","published":"2022-01-25T12:58:33Z","modified":"2026-02-04T04:30:01.726142Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5243-1","title":"aide vulnerability","description":"David Bouman discovered that AIDE incorrectly handled base64 operations. A\nlocal attacker could use this issue to cause AIDE to crash, resulting in a\ndenial of service, or possibly execute arbitrary code.\n","status":"published","published":"2022-01-20T14:48:31Z","modified":"2026-02-10T04:42:25Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5243-2","title":"aide vulnerability","description":"USN-5243-1 fixed a vulnerability in aide. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\n\nOriginal advisory details:\n\n David Bouman discovered that AIDE incorrectly handled base64 operations. A\n local attacker could use this issue to cause AIDE to crash, resulting in a\n denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2022-01-20T16:12:06Z","modified":"2026-06-29T13:49:35.65220197Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}