CVE-2021-45417: Advanced Intrusion Detection Environment Project Advanced Intrusion Detection Environment

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Affected products

• Advanced Intrusion Detection Environment Project Advanced Intrusion Detection Environment: from 0.13, up to and including 0.17.3
• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 20.04 only; version 21.04 only; version 21.10 only
• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 35 only
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only
• Red Hat Ovirt-Node: version 4.4.10 only
• Red Hat Virtualization Host: version 4.0 only

Published 2022-01-20. Last modified 2026-06-17.