CVE-2025-2588 is a low-severity null pointer dereference vulnerability affecting Hercules Augeas version 1.14.1, specifically within the re_case_expand function in src/fa.c. This flaw can be triggered by manipulating the 're' argument, leading to a denial of service. Exploitation requires local access and user privileges, with a CVSS score of 3.3. While public exploit details exist, there is no evidence of active exploitation, nor are there any known Metasploit or Nuclei modules, and community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.14.1CPE matchmatch criteria | cpe:2.3:a:augeas:augeas:1.14.1:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.