CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

PT-2021-17726

Name of the Vulnerable Software and Affected Versions: OSSEC version 3.6.0 Description: An issue was discovered in the os xml.c component, where an uncontrolled recursion vulnerability occurs when a large number of opening and closing XML tags is used. This happens because recursion is used in th...

OSSEC security vulnerabilities

Scott R. Shinn OSSEC is Scott R. Shinn an open source application. OSSEC provides a simple, powerful and open source solution that combines all aspects of HIDS Host Based Intrusion Detection, log monitoring and SIM,SIEM. A security vulnerability exists in OSSEC 3.6.0, which stems from the...