critical9.8
CVE-2024-32038
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Impact
Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd when handling Unicode characters from Windows Eventchannel messages. It impacts Wazuh Manager 3.8.0 and above. This vulnerability is fixed in Wazuh Manager 4.7.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wazuh | Wazuh | from 3.8.0 before 4.7.2 |