Augeas

This hub aggregates every CVE we track for Augeas, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Augeas.

• CVE-2025-2588Hercules Augeas fa.c re_case_expand null pointer dereference3.3Mar 21, 2025
• CVE-2017-7555Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the applicat...9.8Aug 17, 2017
• CVE-2013-6412The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to ...4.6Jan 23, 2014
• CVE-2012-6607The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backu...3.3Nov 23, 2013
• CVE-2012-0787The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files...3.7Nov 23, 2013
• CVE-2012-0786The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.3.3Nov 23, 2013