PT-2025-44323 · Wazuh · Wazuh

Published 2025-01-23 · Updated 2025-10-29 · CVE-2025-62789

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0

Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the

fim alert()

implementation where it does not verify if the return value of

ctime r

is NULL before using it with

strdup()

. A malicious agent can exploit this to crash the

analysisd

component of the Wazuh manager by sending a crafted message. This can lead to denial of service, making the manager unavailable.

Recommendations Update to version 4.11.0 or later.

Fix

DoS

Unchecked Return Value

NULL Pointer Dereference

Weakness Enumeration

CWE-252

CWE-476

Related Identifiers

BDU:2025-14487

CVE-2025-62789

GHSA-8RVQ-MM2F-8Q22

Affected Products

Wazuh

References · 9

• https://github.com/wazuh/wazuh/security/advisories/GHSA-8rvq-mm2f-8q22 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62789 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14487 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62789 · Security Note
• https://twitter.com/VulmonFeeds/status/1983678938917323200 · Twitter Post
• https://t.me/CVEtracker/36088 · Telegram Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44323 · Note
• https://twitter.com/CVEnew/status/1983577229612163393 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62789 · Note