CVE-2021-45417

Katalog CVE

CVSS 7.8 · High EPSS 0,49%

Kerentanan Out-of-bounds Write pada advanced intrusion detection environment project advanced intrusion detection environment, redhat ovirt-node +5 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Rincian

Terbit di NVD

20 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2022/01/20/3 exploit · mailing list · mitigasi · patch
• https://www.ipi.fi/pipermail/aide/2022-January/001713.html exploit · mailing list · mitigasi · patch
• https://www.openwall.com/lists/oss-security/2022/01/20/3 exploit · mailing list · mitigasi · patch
• https://lists.debian.org/debian-lts-announce/2022/01/msg00024.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5051 advisory pihak ketiga
• https://security.gentoo.org/glsa/202311-07