A null pointer dereference vulnerability was found in AIDE, an advanced intrusion detection system. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might
exploit this to cause a local denial of service.