CVE-2023-49275: Wazuh

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing of the analysis engine, allowing malicious clients to DoS the analysis engine. The bug occurs when `analysisd` receives a syscollector message with the `hotfix` `msg_type` but lacking a `timestamp`. It uses `cJSON_GetObjectItem()` to get the `timestamp` object item and dereferences it without checking for a `NULL` value. A malicious client can DoS the analysis engine. This vulnerability is fixed in 4.7.1.

Affected products

• Wazuh Wazuh: from 3.2.0, before 4.7.1 (fixed in 4.7.1)

Published 2024-04-19. Last modified 2026-06-17.