{
  "cveId": "CVE-2025-54409",
  "url": "https://patchblox.com/security/cve/CVE-2025-54409",
  "summary": "CVE-2025-54409 is fixed in 6 products on 1 platform, first by aide 0.16-3ubuntu0.1\u002Besm1, released August 14, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)",
  "description": "AIDE is an advanced intrusion detection environment. From versions 0.13 to0.19.1, there is a null pointer dereference vulnerability in AIDE. Anattacker can crash the program during report printing or database listingafter setting extended file attributes with an empty attribute value orwith a key containing a comma. A local user might exploit this to cause alocal denial of service. This issue has been patched in version 0.19.2. Aworkaround involves removing xattrs group from rules matching files onaffected file systems.",
  "published": "2025-08-14T07:00:00Z",
  "severity": "Moderate",
  "cvss": 6.2,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "NULL Pointer Dereference",
  "epss": 0.00261,
  "epssPercentile": 0.17976,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54409",
  "fixes": [
    {
      "platform": "linux",
      "product": "aide",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "0.18.3-1\u002Bdeb12u4",
      "fix": "DEBIAN-CVE-2025-54409",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-54409",
      "released": "2025-08-14T16:15:39Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.19.1-2\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2025-54409",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-54409",
      "released": "2025-08-14T16:15:39Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Debian 14",
      "fixedVersion": "0.19.2-1",
      "fix": "DEBIAN-CVE-2025-54409",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-54409",
      "released": "2025-08-14T16:15:39Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.16-3ubuntu0.1\u002Besm1",
      "fix": "aide 0.16-3ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-aide-0.16-3ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "0.16.1-1ubuntu0.1\u002Besm1",
      "fix": "aide 0.16.1-1ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-aide-0.16.1-1ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.17.4-1ubuntu0.2",
      "fix": "aide 0.17.4-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-aide-0.17.4-1ubuntu0.2",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "0.18.6-2ubuntu0.1",
      "fix": "aide 0.18.6-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-aide-0.18.6-2ubuntu0.1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.18.8-2ubuntu0.1",
      "fix": "aide 0.18.8-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-aide-0.18.8-2ubuntu0.1",
      "released": "2026-01-16T01:42:25Z"
    },
    {
      "platform": "linux",
      "product": "aide",
      "release": "amzn 2023",
      "fixedVersion": "0.18.6-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-1462",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1462",
      "released": "2026-03-02T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.16-3ubuntu0.1\u002Besm1",
      "fix": "aide-common 0.16-3ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-aide-common-0.16-3ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "0.16.1-1ubuntu0.1\u002Besm1",
      "fix": "aide-common 0.16.1-1ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-aide-common-0.16.1-1ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-common",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.17.4-1ubuntu0.2",
      "fix": "aide-common 0.17.4-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-aide-common-0.17.4-1ubuntu0.2",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-common",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "0.18.6-2ubuntu0.1",
      "fix": "aide-common 0.18.6-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-aide-common-0.18.6-2ubuntu0.1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-common",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.18.8-2ubuntu0.1",
      "fix": "aide-common 0.18.8-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-aide-common-0.18.8-2ubuntu0.1",
      "released": "2026-01-16T01:42:25Z"
    },
    {
      "platform": "linux",
      "product": "aide-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "0.18.6-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-1462",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1462",
      "released": "2026-03-02T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "0.18.6-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-1462",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1462",
      "released": "2026-03-02T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-dynamic",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.16-3ubuntu0.1\u002Besm1",
      "fix": "aide-dynamic 0.16-3ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-aide-dynamic-0.16-3ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-dynamic",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "0.16.1-1ubuntu0.1\u002Besm1",
      "fix": "aide-dynamic 0.16.1-1ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-aide-dynamic-0.16.1-1ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-dynamic",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.17.4-1ubuntu0.2",
      "fix": "aide-dynamic 0.17.4-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-aide-dynamic-0.17.4-1ubuntu0.2",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-dynamic",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "0.18.6-2ubuntu0.1",
      "fix": "aide-dynamic 0.18.6-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-aide-dynamic-0.18.6-2ubuntu0.1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-dynamic",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.18.8-2ubuntu0.1",
      "fix": "aide-dynamic 0.18.8-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-aide-dynamic-0.18.8-2ubuntu0.1",
      "released": "2026-01-16T01:42:25Z"
    },
    {
      "platform": "linux",
      "product": "aide-xen",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.16-3ubuntu0.1\u002Besm1",
      "fix": "aide-xen 0.16-3ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-aide-xen-0.16-3ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-xen",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "0.16.1-1ubuntu0.1\u002Besm1",
      "fix": "aide-xen 0.16.1-1ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-aide-xen-0.16.1-1ubuntu0.1-esm1",
      "released": "2025-08-14T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aide-xen",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.17.4-1ubuntu0.2",
      "fix": "aide-xen 0.17.4-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-aide-xen-0.17.4-1ubuntu0.2",
      "released": "2025-08-14T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}