PatchTheCVEaugeas vulnerabilities and fixes
Recent CVEs affecting augeas, with upgrade or downgrade steps. 5 tracked.
augeas has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2017-08-17. Highest priority: CVE-2017-7555 (score 62/100).
- CVE-2017-7555 CRITICAL 9.8 UPGRADE Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handlin
- CVE-2013-6412 MEDIUM 4.6 DOWNGRADE The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permi
- CVE-2012-6607 LOW 3.3 UPGRADE The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary fi
- CVE-2012-0787 LOW 3.7 MITIGATE UPGRADE The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EB
- CVE-2012-0786 LOW 3.3 UPGRADE The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary fi
FAQ
How do I fix augeas vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is augeas being exploited right now?
None of the tracked augeas CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which augeas CVE should I patch first?
CVE-2017-7555 currently ranks highest (62/100): Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handlin.