Skip to content
OpenAdvisories
Unscored CVE-2021-28040 EUVD-2021-14747GHSA-87rm-8q5w-499g

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closi…

Published Mar 5, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached.

References