CyberRota Analysis
AI-GeneratedWazuh versions 3.0.0 to 4.14.4 are vulnerable to a size_t integer underflow that can cause the wazuh-remoted process on the manager to crash, disconnecting all enrolled agents. Additionally, this vulnerability may lead to heap memory corruption, posing a risk of further exploitation. Organizations using affected Wazuh versions should prioritize upgrading to version 4.14.5 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to crash the wazuh-remoted process on the manager, immediately disconnecting all agents from the manager. A second code path reached by the same underflow may allow heap memory corruption. This issue has been fixed in version 4.14.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)