| Package | Affected versions | Patched versions |
|---|---|---|
| wazuh | ≥ 3.8.0, < 4.11.0 | 4.11.0 |
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in version 4.11.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free