CVE-2020-8447

2020-01-3001:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.4%

JSON

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).

CPENameOperatorVersion
ossec-hidseq3.5.0
ossec-hidseq3.2.0
ossec-hidseq2.8.1
ossec-hidseq2.7
ossec-hidseq2.9.0beta05
ossec-hidseq3.4.0
ossec-hidseq2.9.0-beta01
ossec-hidseq2.9.0-beta02
ossec-hidseqsnapshot/20150112
ossec-hidseq3.0beta01

Name	Operator	Version
ossec-hids	eq	3.5.0
ossec-hids	eq	3.2.0
ossec-hids	eq	2.8.1
ossec-hids	eq	2.7
ossec-hids	eq	2.9.0beta05
ossec-hids	eq	3.4.0
ossec-hids	eq	2.9.0-beta01
ossec-hids	eq	2.9.0-beta02
ossec-hids	eq	snapshot/20150112
ossec-hids	eq	3.0beta01