PT-2025-12414 · Unknown+4 · Hercules Augeas+4
Published
2025-03-10
·
Updated
2025-08-07
·
CVE-2025-2588
CVSS v4.0
4.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Hercules Augeas version 1.14.1
Description
A problematic issue has been found, affecting the
re case expand function in the src/fa.c file. The manipulation of the re argument leads to a null pointer dereference. Local attacks are required to exploit this issue. The exploit has been publicly disclosed and may be used.Recommendations
For Hercules Augeas version 1.14.1, as a temporary workaround, consider disabling the
re case expand function until a patch is available. Restrict access to the src/fa.c file to minimize the risk of exploitation. Avoid using the re argument in the affected function until the issue is resolved.Exploit
Fix
DoS
NULL Pointer Dereference
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Hercules Augeas
Suse