CVE-2025-54409

MEDIUM

Advanced Intrusion Detection Environment - NULL Pointer Dereference

Title source: rule

Description

AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.

References (5)

Core 5

Core References

Exploit, Mitigation, Vendor Advisory x_refsource_confirm

https://github.com/aide/aide/security/advisories/GHSA-79g7-f8rv-jcxh

Patch x_refsource_misc

https://github.com/aide/aide/commit/54a6d0d9d5f14b81961d66373c0291bf4af4135a

View Patch ZIP pw:eip

Release Notes x_refsource_misc

https://github.com/aide/aide/releases/tag/v0.19.2

Mailing List

https://lists.debian.org/debian-lts-announce/2025/08/msg00011.html

Mailing List

http://www.openwall.com/lists/oss-security/2025/08/14/8

Scores

CVSS v3 6.2

EPSS 0.0003

EPSS Percentile 7.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (1)

advanced_intrusion_detection_environment_project/advanced_intrusion_detection_environment 0.13 - 0.19.2

Published Aug 14, 2025

Tracked Since Feb 18, 2026