Skip to content
OpenAdvisories
High ALAS2-2022-1850 1 CVE

Important: aide security update (Amazon Linux 2)

Published Sep 15, 2022 · Updated Oct 10, 2022

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45417: A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could crash the program and possibly execute arbitrary code through large (<16k) extended file attributes or ACL.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 aide 0:0.16.2-1.amzn2.0.2
Amazon Linux · 2 aide-debuginfo 0:0.16.2-1.amzn2.0.2

Vulnerabilities 1

  • Unscored —
    CVE-2021-45417

    AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attribu…

    aide aide Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-45417.html