CVE-2020-8442

Опубликовано: 30 янв. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-based buffer overflow in the rootcheck decoder component via an authenticated client.

Ссылки

https://github.com/ossec/ossec-hids/issues/1820
Exploit
Patch
Third Party Advisory
https://github.com/ossec/ossec-hids/issues/1821
Third Party Advisory
https://security.gentoo.org/glsa/202007-33
Third Party Advisory
https://www.ossec.net/
Vendor Advisory
https://github.com/ossec/ossec-hids/issues/1820
Exploit
Patch
Third Party Advisory
https://github.com/ossec/ossec-hids/issues/1821
Third Party Advisory
https://security.gentoo.org/glsa/202007-33
Third Party Advisory
https://www.ossec.net/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ossec:ossec:*:*:*:*:*:*:*:*

Версия от 2.7 (включая) до 3.5.0 (включая)

EPSS

Процентиль: 73%

0.00767

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2020-8442

CVSS3: 8.8

debian

почти 6 лет назад

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for ...

GHSA-249h-cc9x-grm3

CVSS3: 8.8

github

больше 3 лет назад

EPSS

Процентиль: 73%

0.00767

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-787