A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

vendor_unpatched cve-2025-2588: Unpatched CVEs for Debian Linux (cve-2025-2588)

The version of augeas installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2588 advisory.

  - A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability     affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to     null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public     and May be used. (CVE-2025-2588)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-31036092ea advisory.

    CVE-2025-2588

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of augeas installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2588 advisory.

  - A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability     affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to     null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public     and May be used. (CVE-2025-2588)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-117fe4c81f advisory.

    CVE-2025-2588

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234536	Azure Linux 3.0 Security Update: augeas (CVE-2025-2588)	Nessus	Azure Linux Local Security Checks	medium
234067	Fedora 40 : augeas (2025-31036092ea)	Nessus	Fedora Local Security Checks	medium
234062	CBL Mariner 2.0 Security Update: augeas (CVE-2025-2588)	Nessus	MarinerOS Local Security Checks	medium
233483	Fedora 41 : augeas (2025-117fe4c81f)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2025-2588

medium

Tenable Plugins

Coming Soon

medium

medium

medium

medium