PT-2025-12414 · Unknown +2 · Hercules Augeas +2
Published
2025-03-21
·
Updated
2025-06-09
·
CVE-2025-2588
Published
2025-03-21
·
Updated
2025-06-09
·
CVE-2025-2588
4.8
Medium
| Base vector | Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions:
Hercules Augeas version 1.14.1
Description:
A problematic issue has been found, affecting the `re case expand` function in the `src/fa.c` file. The manipulation of the `re` argument leads to a null pointer dereference. Local attacks are required to exploit this issue. The exploit has been publicly disclosed and may be used.
Recommendations:
For Hercules Augeas version 1.14.1, as a temporary workaround, consider disabling the `re case expand` function until a patch is available. Restrict access to the `src/fa.c` file to minimize the risk of exploitation. Avoid using the `re` argument in the affected function until the issue is resolved.
Exploit
Fix
NULL Pointer Dereference
Improper Resource Release