CVE-2021-45417

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-01-20 · updated 2026-06-17
Weakness: CWE-787

Description

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Affected products

Advanced Intrusion Detection Environment Project Advanced Intrusion Detection Environment: from 0.13 through 0.17.3
Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 20.04, 21.04, 21.10
Debian Linux: 9.0, 10.0, 11.0
Fedoraproject Fedora: 35
Red Hat Enterprise Linux: 6.0, 7.0, 8.0
RedHat Ovirt-Node: 4.4.10
RedHat Virtualization Host: 4.0

References

http://www.openwall.com/lists/oss-security/2022/01/20/3
https://lists.debian.org/debian-lts-announce/2022/01/msg00024.html
https://security.gentoo.org/glsa/202311-07
https://www.debian.org/security/2022/dsa-5051
https://www.ipi.fi/pipermail/aide/2022-January/001713.html
https://www.openwall.com/lists/oss-security/2022/01/20/3
http://www.openwall.com/lists/oss-security/2022/01/20/3
https://lists.debian.org/debian-lts-announce/2022/01/msg00024.html
https://security.gentoo.org/glsa/202311-07
https://www.debian.org/security/2022/dsa-5051
https://www.ipi.fi/pipermail/aide/2022-January/001713.html
https://www.openwall.com/lists/oss-security/2022/01/20/3

Get alerted when CVE-2021-45417 or the next vulnerability affects your stack