TI-2021-09320 CVE-2021-28040 · GHSA-87rm-8q5w-499g
An issue was discovered in OSSEC 3.6.0.
Priority LOW 35
An issue was discovered in OSSEC 3.6.0.
Vulnerabilities
11 records
TI-2020-06779 CVE-2020-8442 · GHSA-249h-cc9x-grm3
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis…
Priority MEDIUM 43
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-based buffer overflow in the rootcheck decoder component via an authenticated client.
TI-2020-06780 CVE-2020-8443 · GHSA-wpvm-52j3-27mh
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis…
Priority MEDIUM 47
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs (received from aut…
TI-2020-06781 CVE-2020-8444 · GHSA-qjcm-4w5p-gw32
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis…
Priority MEDIUM 47
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of ossec-alert formatted msgs (received from authenticated remote a…
TI-2020-06782 CVE-2020-8445 · GHSA-9vhf-xgg9-m6cf
In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't…
Priority MEDIUM 46
In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from processed log messages.
TI-2020-06783 CVE-2020-8446 · GHSA-96pq-2p2q-gx9m
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis…
Priority LOW 25
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path traversal (with write access) via crafted syscheck messages written directly to the analysisd UNI…
TI-2020-06784 CVE-2020-8447 · GHSA-g47q-9m4h-vgjq
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis…
Priority MEDIUM 46
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from authenticated remote agen…
TI-2020-06785 CVE-2020-8448 · GHSA-8vg3-7pxv-7pq6
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis…
Priority LOW 25
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd…
TI-2018-13942 CVE-2018-19666 · GHSA-wq56-87f7-3fcv
The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT…
Priority LOW 35
The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.
TI-2015-02851 CVE-2015-3222 · GHSA-rfqq-rq49-86mw
syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
Priority LOW 35
syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
TI-2014-04316 CVE-2014-5284 · GHSA-c37w-36r4-fj2g
host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames…
Priority LOW 36
host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creati…