A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01534-1 advisory.

    - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase.
    (bsc#1239909)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6b5c54bd05 advisory.

    CVE-2025-2588

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01754-1 advisory.

    - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase.
    (bsc#1239909)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1534-1 advisory.

    - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase.
    (bsc#1239909)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of augeas installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2588 advisory.

  - A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability     affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to     null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public     and May be used. (CVE-2025-2588)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-31036092ea advisory.

    CVE-2025-2588

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of augeas installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2588 advisory.

  - A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability     affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to     null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public     and May be used. (CVE-2025-2588)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-117fe4c81f advisory.

    CVE-2025-2588

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
238046	SUSE SLED15 / SLES15 Security Update : augeas (SUSE-SU-2025:01534-1)	Nessus	SuSE Local Security Checks	medium
237948	Fedora 42 : augeas (2025-6b5c54bd05)	Nessus	Fedora Local Security Checks	medium
237535	SUSE SLES12 Security Update : augeas (SUSE-SU-2025:01754-1)	Nessus	SuSE Local Security Checks	low
235778	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : augeas (SUSE-SU-2025:1534-1)	Nessus	SuSE Local Security Checks	low
234536	Azure Linux 3.0 Security Update: augeas (CVE-2025-2588)	Nessus	Azure Linux Local Security Checks	low
234067	Fedora 40 : augeas (2025-31036092ea)	Nessus	Fedora Local Security Checks	medium
234062	CBL Mariner 2.0 Security Update: augeas (CVE-2025-2588)	Nessus	MarinerOS Local Security Checks	low
233483	Fedora 41 : augeas (2025-117fe4c81f)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2025-2588

medium

Tenable Plugins

medium

medium

low

low

low

medium

low

medium