Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the authentication daemon.
| Vendor | Product | Versions |
|---|---|---|
| wazuh | wazuh | 3.5.0, 4.3.10 |
Updated description with more technical detail, changed severity to HIGH, set CVSS estimate to 7.5, and marked as actively exploited.
Initial creation
