CVE-2021-45417 Memory corruption in n/a
Local attackers can gain root privileges via a heap-based buffer overflow in AIDE caused by crafted file metadata.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-45417?
CVE-2021-45417 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 20 Jan 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
Weakness: CWE-787
Which versions are affected by CVE-2021-45417?
It affects 7 products.
Linux distribution packages (40)
aide AlmaLinux:8 | All versions | 0.16-14.el8_5.1 |
aide Red Hat:enterprise_linux:7::client | All versions | 0:0.15.1-13.el7_9.1 |
aide-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:0.15.1-13.el7_9.1 |
aide Red Hat:enterprise_linux:7::server | All versions | 0:0.15.1-13.el7_9.1 |
aide-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:0.15.1-13.el7_9.1 |
aide Red Hat:enterprise_linux:7::workstation | All versions | 0:0.15.1-13.el7_9.1 |
aide-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:0.15.1-13.el7_9.1 |
aide Red Hat:enterprise_linux:8::appstream | All versions | 0:0.16-14.el8_5.1 |
aide-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:0.16-14.el8_5.1 |
aide-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:0.16-14.el8_5.1 |
aide Red Hat:rhel_e4s:8.1::appstream | All versions | 0:0.16-11.el8_1.1 |
aide-debuginfo Red Hat:rhel_e4s:8.1::appstream | All versions | 0:0.16-11.el8_1.1 |
aide-debugsource Red Hat:rhel_e4s:8.1::appstream | All versions | 0:0.16-11.el8_1.1 |
aide Red Hat:rhel_els:6 | All versions | 0:0.14-11.el6_10.1 |
aide-debuginfo Red Hat:rhel_els:6 | All versions | 0:0.14-11.el6_10.1 |
aide Red Hat:rhel_eus:8.2::appstream | All versions | 0:0.16-11.el8_2.1 |
aide-debuginfo Red Hat:rhel_eus:8.2::appstream | All versions | 0:0.16-11.el8_2.1 |
aide-debugsource Red Hat:rhel_eus:8.2::appstream | All versions | 0:0.16-11.el8_2.1 |
aide Red Hat:rhel_eus:8.4::appstream | All versions | 0:0.16-14.el8_4.1 |
aide-debuginfo Red Hat:rhel_eus:8.4::appstream | All versions | 0:0.16-14.el8_4.1 |
aide-debugsource Red Hat:rhel_eus:8.4::appstream | All versions | 0:0.16-14.el8_4.1 |
aide Rocky Linux:8 | All versions | 0:0.16-14.el8_5.1 |
aide SUSE:Enterprise Storage 6 | All versions | 0.16-24.1 |
aide SUSE:Enterprise Storage 7 | All versions | 0.16-24.1 |
aide SUSE:HPE Helion OpenStack 8 | All versions | 0.16-20.15.1 |
aide SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise Micro 5.1 | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 0.13.1-40.16.6.1 |
aide SUSE:Linux Enterprise Real Time 15 SP2 | All versions | 0.16-24.1 |
aide SUSE:Linux Enterprise Server 11 SP4-LTSS | All versions | 0.13.1-40.16.6.1 |
aide SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 0.16-20.15.1 |
aide SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 0.16-20.15.1 |
aide SUSE:Linux Enterprise Server 12 SP3-LTSS | All versions | 0.16-20.15.1 |
aide SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 0.16-20.15.1 |
Products include Advanced Intrusion Detection Environment Project Advanced Intrusion Detection Environment, Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Redhat Enterprise Linux, Redhat Ovirt-Node and 1 more.
How do I fix CVE-2021-45417?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-45417 being exploited?
There is no known exploitation of CVE-2021-45417 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALSA-2022:0441, DEBIAN-CVE-2021-45417, DLA-2894-1, DSA-5051-1, GHSA-gfm2-8gq5-m3x8, MGASA-2024-0100 and 17 more.