Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8vg3-7pxv-7pq6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user.

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user.

EPSS

Процентиль: 35%
0.00143
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
nvd
около 6 лет назад

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user.

CVSS3: 5.5
debian
около 6 лет назад

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for ...

EPSS

Процентиль: 35%
0.00143
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476