Wazuh v4.14.4 Security Bulletin: Heap Overflow, Race Condition, Path Handling Fixes

Vulnerability Overview Wazuh v4.14.4 addresses multiple vulnerabilities, including heap buffer overflows, null pointer dereferences, and inconsistent timestamp formats. Affected Components Manager - Heap buffer overflow issue. Agent - MS Graph default rules not triggering correctly. - Inconsistent timestamp formats in Active Response logs. - Insufficient detection coverage and compatibility for Docker integration rules. - Heap buffer overflow issue. - MSI installer logs retained after Windows agent upgrade, impacting troubleshooting visibility. - Incorrect agent detection on Windows 11. - macOS agent crashes during syscollector reload. - Incorrect agent detection on Windows OS. - Invalid parameter error for in syscollector on AIX. RESTful API - Inaccurate UTC time returned by the endpoint. - Improper handling of cluster file synchronization paths. - Race condition in API login. Remediation Manager - Fixed heap buffer overflow issue (#34658). Agent - Fixed issue where MS Graph default rules were not triggering correctly (#34240). - Unified timestamp formats in Active Response logs (#34473). - Updated Docker integration rules to improve detection coverage and compatibility (#34376). - Fixed heap buffer overflow issue (#34501). - Retained MSI installer logs to enhance troubleshooting visibility (#34517). - Fixed incorrect agent detection on Windows 11 (#34539). - Fixed macOS agent crash during syscollector reload (#34274). - Fixed incorrect agent detection on Windows OS (#34540). - Fixed invalid parameter error for in syscollector on AIX (#34900). RESTful API - Fixed inaccurate UTC time returned by the endpoint (#34176). - Improved cluster file synchronization path handling by adding secure path joining (#34464). - Fixed race condition in API login (#34459). Other Changes Updated dependency to 1.38.0 and dependency to 3.1.5 (#34154). Updated dependency to 5.29.6 and dependency to 0.0.22 (#34403). No POC code or exploit code is included in this page.

Goal Reached Thanks to every supporter — we hit 100%!

Wazuh v4.14.4 Security Bulletin: Heap Overflow, Race Condition, Path Handling Fixes

More from this source