PT-2025-44323 · Wazuh · Wazuh

Published 2025-01-23 · Updated 2025-10-29 · CVE-2025-62789

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0

Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the fim alert() implementation where it does not verify if the return value of ctime r is NULL before using it with strdup(). A malicious agent can exploit this to crash the analysisd component of the Wazuh manager by sending a crafted message. This can lead to denial of service, making the manager unavailable.

Recommendations Update to version 4.11.0 or later.

Fix

DoS

Unchecked Return Value

NULL Pointer Dereference

Weakness Enumeration

CWE-252

CWE-476

Related Identifiers

BDU:2025-14487

CVE-2025-62789

GHSA-8RVQ-MM2F-8Q22

Affected Products

Wazuh

References · 9

• https://github.com/wazuh/wazuh/security/advisories/GHSA-8rvq-mm2f-8q22 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62789 · Security Note
• https://bdu.fstec.ru/vul/2025-14487 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62789 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62789 · Note
• https://twitter.com/CVEnew/status/1983577229612163393 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44323 · Note
• https://t.me/CVEtracker/36088 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1983678938917323200 · Twitter Post