Wazuh Authd Heap-Buffer Overflow Vulnerability Leading to Denial-of-Service

A heap-buffer overflow vulnerability has been identified in the Wazuh authentication daemon (authd) versions through 3.5.0 and 4.3.10. This vulnerability allows attackers to send specially crafted input that causes memory corruption and creates malformed heap data. Exploitation of this issue can trigger a denial-of-service condition, significantly impacting the availability of the authentication daemon.

Impact

Exploitation of this vulnerability causes memory corruption and heap data mismanagement, leading to a denial-of-service condition that disrupts the Wazuh authentication daemon.