PT-2025-47795 · Wazuh · Wazuh
CVE-2025-64169
·
Published
2025-11-21
·
Updated
2025-11-21
CVSS v4.0
5.1
Medium
| Vector | AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Wazuh versions 3.7.0 through 4.11.9
Description
Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the
fim alert() implementation where it does not verify if oldsum->md5 is NULL before attempting to access it. A compromised agent can exploit this by sending a crafted message to the Wazuh manager, potentially causing a crash of the analysisd component.Recommendations
Update Wazuh to version 4.12.0 or later.
Exploit
Fix
DoS
NULL Pointer Dereference
Unchecked Return Value
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wazuh