Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

CVE-2017-7555

augeas: Improper handling of escaped strings leading to memory corruption

Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.

CVSS 3.0 · 9.8 Critical EPSS 5.2% KEV · Not listed
Vendors
Augeas Redhat
Products
Augeas Enterprise Linux Rhel Aus and 2 more
CVE-2012-0787

augeas: susceptible to mountpoint attack

The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Augeas Redhat
Products
Augeas Enterprise Linux Storage
CVE-2013-6412

augeas: incorrect permissions set on newly created files

The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Augeas Redhat
Products
Augeas Enterprise Linux
CVE-2012-6607

augeas: symlink attack on a .augsave file

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Augeas
Products
Augeas
CVE-2012-0786

augeas: susceptible to symlink attack

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Augeas Redhat
Products
Augeas Enterprise Linux Storage
CVE-2025-2588

Hercules Augeas fa.c re_case_expand null pointer dereference

A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Augeas
Products
Augeas