Null Pointer Dereference Vulnerability in Hercules Augeas Affects Local Users
CVE-2025-2588
Key Information:
Badges
What is CVE-2025-2588?
A local vulnerability exists in Hercules Augeas version 1.14.1, impacting the re_case_expand function within the src/fa.c file. This flaw can be exploited through a carefully crafted argument that leads to a null pointer dereference, potentially allowing an attacker to disrupt normal execution or crash the application. Since the exploit requires local access, it necessitates that the attacker has direct access to the system. This vulnerability has been publicly disclosed, making it critical for users to review their systems and apply necessary mitigations.
Affected Version(s)
Augeas 1.14.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.