CVE catalog
CVE-2025-54409
AIDE vulnerabilities
- Severity
- Medium · CVSS 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.25% · Oct 25, 2026
AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | aide | sid | 0.19.5-1 | fixed |
| Debian | aide | forky | 0.19.5-1 | fixed |
| Debian | aide | trixie | 0.19.1-2+deb13u2 | fixed |
| Debian | aide | trixie-security | 0.19.1-2+deb13u5 | fixed |
| Debian | aide | bookworm | 0.18.3-1+deb12u4 | fixed |
| Debian | aide | bookworm-security | 0.18.3-1+deb12u5 | fixed |
| Ubuntu | aide | noble | 0.18.6-2ubuntu0.1 | fixed |
| Ubuntu | aide-common | noble | 0.18.6-2ubuntu0.1 | fixed |
| Ubuntu | aide-dynamic | noble | 0.18.6-2ubuntu0.1 | fixed |
| Ubuntu | aide | noble | 0.18.3-1+deb12u4 | fixed |
| Ubuntu | aide | pro | 0.16.1-1build2 | vulnerable |
| Ubuntu | aide | pro | 0.16.1-1ubuntu0.1 | vulnerable |
| Ubuntu | aide | pro | 0.16.1-1ubuntu0.1+esm1 | fixed |
| Ubuntu | aide | 22.04 | 0.17.3-4build1 | vulnerable |
| Ubuntu | aide | 22.04 | 0.17.3-5 | vulnerable |
| Ubuntu | aide | 22.04 | 0.17.4-1 | vulnerable |
| Ubuntu | aide | 22.04 | 0.17.4-1ubuntu0.1 | vulnerable |
| Ubuntu | aide | 22.04 | 0.17.4-1ubuntu0.2 | fixed |
| Ubuntu | aide | 24.04 | 0.18.5-1 | vulnerable |
| Ubuntu | aide | 24.04 | 0.18.6-2 | vulnerable |
| Ubuntu | aide | 24.04 | 0.18.6-2build1 | vulnerable |
| Ubuntu | aide | 24.04 | 0.18.6-2build2 | vulnerable |
| Ubuntu | aide | 24.04 | 0.18.6-2ubuntu0.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | aide | source | sid | 0.19.2-1 | not yet assigned | Not reported | Not reported |
| Debian | aide | source | forky | 0.19.2-1 | not yet assigned | Not reported | Not reported |
| Debian | aide | source | trixie | 0.19.1-2+deb13u1 | not yet assigned | Not reported | Not reported |
| Debian | aide | source | bookworm | 0.18.3-1+deb12u4 | not yet assigned | Not reported | Not reported |
| Ubuntu | aide | deb | noble | 0.18.6-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Ubuntu | aide-common | deb | noble | 0.18.6-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Ubuntu | aide-dynamic | deb | noble | 0.18.6-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Ubuntu | aide | deb | noble | 0.18.3-1+deb12u4 | Not reported | Not reported | Not reported |
| Ubuntu | aide | deb | pro | 0.16.1-1ubuntu0.1+esm1 | Not reported | UBUNTU-CVE-2025-54409 | Not reported |
| Ubuntu | aide | deb | 22.04 | 0.17.4-1ubuntu0.2 | Not reported | UBUNTU-CVE-2025-54409 | Not reported |
| Ubuntu | aide | deb | 24.04 | 0.18.6-2ubuntu0.1 | Not reported | UBUNTU-CVE-2025-54409 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [aide]Fixed
Details (4)
0.18.3-1+deb12u4· amd64 · bookwormFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· arm64 · bookwormFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· amd64 · bookworm-securityFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· arm64 · bookworm-securityFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
- [aide-common]Fixed
Source package: [aide]
Details (4)
0.18.3-1+deb12u4· all · bookwormFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· all · bookwormFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· all · bookworm-securityFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· all · bookworm-securityFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
- [aide-dynamic]Fixed
Source package: [aide]
Details (4)
0.18.3-1+deb12u4· all · bookwormFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· all · bookwormFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· all · bookworm-securityFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
0.18.3-1+deb12u4· all · bookworm-securityFixed · Fixed:
0.18.3-1+deb12u4usn · aide · debian · bookworm; usn · aide · debian · 12
[Debian 13 (Trixie)]
- [aide]Fixed
Details (5)
0.19.1-2+deb13u2· amd64 · trixieFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u2· arm64 · trixieFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u1· arm64 · trixie-securityFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u5· amd64 · trixie-securityFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
- [aide-common]Fixed
Source package: [aide]
Details (5)
0.19.1-2+deb13u2· all · trixieFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u2· all · trixieFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u1· all · trixie-securityFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u1· all · trixie-security · Historical versionFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u5· all · trixie-securityFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
- [aide-dynamic]Fixed
Source package: [aide]
Details (5)
0.19.1-2+deb13u2· all · trixieFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u2· all · trixieFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u1· all · trixie-security · Historical versionFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u1· all · trixie-securityFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
0.19.1-2+deb13u5· all · trixie-securityFixed · Fixed:
0.19.1-2+deb13u1usn · aide · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20657-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-54409]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-54409]
- [https://security-tracker.debian.org/tracker/CVE-2025-54409]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-54409.json]
- [https://ubuntu.com/security/notices/USN-7697-1]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]