CVE-2021-45417

PoC ×3—

CVSS 3.1

7.8 high

EPSS

<1%p41

Published

Jan 20, 2022 (Jan 20, 2022)

Modified

Jun 17, 2026

Description

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Vendors: advanced intrusion detection environment project redhat fedoraproject canonical debian
Products: advanced intrusion detection environment, ovirt-node, virtualization host, enterprise linux, fedora, ubuntu linux, debian linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.