REDHAT-BUG-2388019: High severity aide aide vulnerability

Published Aug 12, 2025

Updated

A flaw was discovered an improper output neutralization vulnerability in AIDE, an advanced intrusion detection system. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamper with the log output. A local user might exploit this to bypass the AIDE detection of malicious files. Additionally the output of extended attribute key names and symbolic links targets are also not properly neutralized.

Affected Software

1 affected component

aide aide

Event History

Aug 12, 2025

Data Sourced

via Red Hat·06:55 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2388019?

The severity of REDHAT-BUG-2388019 is classified as a vulnerability that allows for improper output neutralization.

How do I fix REDHAT-BUG-2388019?

To fix REDHAT-BUG-2388019, it is recommended to update AIDE to the latest version that addresses this vulnerability.

What software is affected by REDHAT-BUG-2388019?

The affected software for REDHAT-BUG-2388019 is AIDE, an advanced intrusion detection system.

What can an attacker do with REDHAT-BUG-2388019?

An attacker can exploit REDHAT-BUG-2388019 by crafting malicious filenames that include terminal escape sequences to alter log outputs.

What type of vulnerability is REDHAT-BUG-2388019?

REDHAT-BUG-2388019 is categorized as an improper output neutralization vulnerability.