Lucene search
HistoryJan 12, 2024 - 9:15 p.m.
CVE-2023-42463
wazuh
open source
threat prevention
stack overflow
local privilege escalation
vulnerability
patched
version 4.5.3
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.7%
Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stack overflow hazard that could allow a local privilege escalation. This vulnerability was patched in version 4.5.3.
Affected configurations
Node
wazuhwazuhRange<4.5.3
Related
prion
prion
Design/Logic Flaw
2024-01-12 21:15:00
cvelist
cvelist
zdi
zdi
osv
osv
CVE-2023-42463
2024-01-12 21:15:09
cve
cve
CVE-2023-42463
2024-01-12 21:15:09
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.7%
Related for NVD:CVE-2023-42463