high7.5
CVE-2021-28040
An issue was discovered in OSSEC 3.6.0.
Impact
An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ossec | Ossec | Version 3.6.0 |