CyberRota Analysis
AI-GeneratedWazuh versions 3.9.0 to 4.14.4 are vulnerable to a denial of service attack due to improper handling of message headers in the cluster protocol parser, allowing remote attackers to exhaust memory by sending a specially crafted payload. This vulnerability can lead to service disruptions, making it critical for organizations using Wazuh for threat detection and response to prioritize upgrading to version 4.14.5 or later. Security teams should assess their deployment to mitigate potential impacts on availability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exhaustion in the cluster protocol parser by sending a crafted message header with an arbitrarily large payload length. The length is trusted before authentication/decryption and used directly to allocate memory, allowing unauthenticated denial of service of the cluster service. This issue has been fixed in version 4.14.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)