CVE-2020-8442

Katalog CVE

CVSS 8.8 · High EPSS 2,4%

Kerentanan Out-of-bounds Write pada ossec. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-based buffer overflow in the rootcheck decoder component via an authenticated client.

Rincian

Terbit di NVD

30 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ossec.net/ advisory vendor
• https://github.com/ossec/ossec-hids/issues/1820 exploit · patch · advisory pihak ketiga
• https://github.com/ossec/ossec-hids/issues/1821 advisory pihak ketiga
• https://security.gentoo.org/glsa/202007-33 advisory pihak ketiga