CVE-2020-8448

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a denial of service NULL pointer dereference via crafted messages written directly to the analysisd UNIX domain socket by a local user...

CVE-2020-8448

OSSEC-HIDS CVE-2020-8448 affects 2.7–3.5.0; the server component ossec-analysisd is vulnerable to a denial of service via a NULL pointer dereference when local users craft messages sent to the analysisd UNIX domain socket. Impact is a local DoS with partial availability impact per CVSS. Mitigatio...