PT-2025-33306 · Aide+6 · Aide+6
Raj3Shp
·
Published
2025-08-13
·
Updated
2025-09-22
·
CVE-2025-54389
CVSS v3.1
6.2
Medium
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
AIDE versions prior to 0.19.2
Description:
AIDE is susceptible to an improper output neutralization issue. An attacker can create a malicious filename containing terminal escape sequences to conceal file additions or removals from reports and manipulate log output. A local user could exploit this to circumvent AIDE’s detection of malicious files. The output of extended attribute key names and symbolic link targets are also not properly neutralized.
Recommendations:
Versions prior to 0.19.2: Update to version 0.19.2 or later.
Versions prior to 0.19.2: Configure AIDE to write the report output to a regular file.
Versions prior to 0.19.2: Redirect stdout to a regular file.
Versions prior to 0.19.2: Redirect the log output written to stderr to a regular file.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aide
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Ubuntu