Skip to content
OpenAdvisories
Medium DLA-4272-1 2 CVEs

aide - security update

Published Aug 14, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 aide 0.17.3-4+deb11u3

Vulnerabilities 2

  • Medium 6.2

    AIDE improper output neutralization vulnerability

    AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal o…

  • Medium 6.2

    AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)

    AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes w…