TI-2025-02256 CVE-2025-2588 · GHSA-hxwj-c5vw-fwgp
Hercules Augeas fa.c re_case_expand null pointer dereference
Priority MEDIUM 55
A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic.
Augeas
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Augeas records in CISA KEVNo Augeas vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2017-05196 CVE-2017-7555 · GHSA-r8cq-v6vf-645g
Heap-based buffer overflow in Red Hat augeas
Priority MEDIUM 50
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings.
TI-2013-05366 CVE-2013-6412 · GHSA-92m6-rfw4-wpq6
The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not…
Priority LOW 21
The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files a…
TI-2012-00724 CVE-2012-0787 · GHSA-8qr9-h3xv-vhx6
The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails…
Priority LOW 18
The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive i…
TI-2012-05325 CVE-2012-6607 · GHSA-2x6r-rq7f-fcrj
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to…
Priority LOW 16
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a differ…
TI-2012-00723 CVE-2012-0786 · GHSA-v2f6-mg42-536m
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to…
Priority LOW 16
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.