vulnerability

Amazon Linux AMI: CVE-2021-45417: Security patch for aide (ALAS-2022-1587)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
2022-01-20
Added
2022-06-10
Modified
2022-06-10

Description

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Solution

amazon-linux-upgrade-aide

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today