CVE:CVE-2021-45417
CNNVD:CNNVD-202201-1787
Aide是一个监控文件系统变化的工具。可以使用检测未经授权的受监控文件和目录。
AIDE 存在缓冲区错误漏洞，该漏洞源于 AIDE 的 base64 函数中存在基于堆的缓冲区溢出漏洞。 攻击者可以使程序崩溃，并可能通过大型（<16k）扩展文件属性或 ACL 执行任意代码。
solution:Upgrade advanced_intrusion_detection_environment_project advanced_intrusion_detection_environment to a higher version than 0.17.3,and avoid the version [0.13,0.17.3]; Upgrade redhat ovirt-node to a higher version than 4.4.10,and avoid the version 4.4.10; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,21.04,21.10,and avoid the version 14.04,16.04,18.04,20.04,21.04,21.10; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0