Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-7340

Wazuh authd service (os_auth) Heap-based Buffer Overflow

Description

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the authentication daemon.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wazuh Wazuh

Default version status: unaffected

  • 3.5.0 to ≤ 4.3.10affected

References