Vulnerability record · CVE-2025-2588 · published 21 March 2025

CVE-2025-2588: Augeas improper resource shutdown vulnerability

Augeas · Augeas

A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

4.8 CVSS 4.0 Medium EPSS 0.27% · top 83.5% CWE-404 · Improper resource shutdownCWE-476 · NULL pointer dereference

4.8CVSS 4.0 base score, v2 1.7

0.27%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References, 3 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Augeas Augeas

References

Link	Tags
https://github.com/hercules-team/augeas/issues/852	ExploitIssue Tracking
https://github.com/hercules-team/augeas/issues/852#issue-2905999609	ExploitIssue Tracking
https://vuldb.com/?ctiid.300568	Permissions RequiredVDB Entry
https://vuldb.com/?id.300568	Permissions RequiredVDB Entry
https://vuldb.com/?submit.517281	Third Party AdvisoryVDB Entry
https://github.com/hercules-team/augeas/issues/852#issue-2905999609	ExploitIssue Tracking

Track CVE-2025-2588 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-7555Augeas heap-based buffer overflow vulnerabilityAugeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could se…EPSS 5.0%17 Aug 2017 4.6CVE-2013-6412Augeas permissions and access controls vulnerabilityThe transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a …EPSS 0.37%23 Jan 2014 3.7CVE-2012-0787Redhat enterprise linux vulnerabilityThe clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function,…EPSS 0.41%23 Nov 2013 3.3CVE-2012-0786Augeas link following vulnerabilityThe transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information vi…EPSS 0.45%23 Nov 2013 3.3CVE-2012-6607Augeas path traversal vulnerabilityThe transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information vi…EPSS 0.37%23 Nov 2013 7.8CVE-2018-8639Windows Win32k memory handling flaw allows privilege elevationThe Win32k component in Windows fails to properly handle objects in memory, creating an elevation of privilege vulnerability. It affects a broad rang…KEVEPSS 22%analysed12 Dec 2018 7.8CVE-2018-8611Windows Kernel Memory Handling Elevation of PrivilegeThe Windows kernel fails to properly handle objects in memory, allowing a local attacker to elevate privileges. The flaw affects a broad set of Windo…KEVEPSS 4.2%analysed12 Dec 2018 7.8CVE-2018-8406Microsoft DirectX Graphics Kernel driver elevation of privilegeThe DirectX Graphics Kernel (DXGKRNL) driver mishandles objects in memory, allowing a local attacker to elevate privileges. It affects Windows 10, Wi…KEVEPSS 3.4%analysed15 Aug 2018

Source: NIST National Vulnerability Database (record CVE-2025-2588), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.