Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8448
5.5
MEDIUMCVSS v3
Published
January 30, 2020
CVSS v2
2.1 LOW
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user.
ossec/ossec-hids
GitHubOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
GitHubOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.NVD