Ossec

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ossec:ossec:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOssec (00e65ced-8e0f-52f7-b801-31f28b691be5)
ProductOssec (fe807f0e-6acc-5ac7-bc77-94fef09aff6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/ibmcom/ossec-hids-ppc64le purl2cpe 2026-06-01 10:15:31.666849
pkg:github/ossec/ossec-hids/ purl2cpe 2026-06-01 10:15:31.666852
pkg:rpm/opensuse/ossec-hids purl2cpe 2026-06-01 10:15:31.666854

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8448 vulnerable 2026-06-08 05:27:16.539413 Details available
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user.
Published: 2020-01-30T00:32:38.000Z
Updated: 2024-08-04T09:56:28.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8447 vulnerable 2026-06-08 05:27:16.538996 Details available
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).
Published: 2020-01-30T00:33:18.000Z
Updated: 2024-08-04T09:56:28.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8446 vulnerable 2026-06-08 05:27:16.538584 Details available
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path traversal (with write access) via crafted syscheck messages written directly to the analysisd UNIX domain socket by a local user.
Published: 2020-01-30T00:33:32.000Z
Updated: 2024-08-04T09:56:28.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8445 vulnerable 2026-06-08 05:27:16.538252 Details available
In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from processed log messages. In many cases, those characters are later logged. Because newlines (\n) are permitted in messages processed by ossec-analysisd, it may be possible to inject nested events into the ossec log. Use of terminal control characters may allow obfuscating events or executing commands when viewed through vulnerable terminal emulators. This may be an unauthenticated remote attack for certain types and origins of logged data.
Published: 2020-01-30T00:33:43.000Z
Updated: 2024-08-04T09:56:28.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8444 vulnerable 2026-06-08 05:27:16.537821 Details available
In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of ossec-alert formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).
Published: 2020-01-30T00:33:52.000Z
Updated: 2024-08-04T09:56:28.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8443 vulnerable 2026-06-08 05:27:16.537378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8442 vulnerable 2026-06-08 05:27:16.536841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19666 vulnerable 2026-06-08 05:11:16.003344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5284 vulnerable 2026-06-08 05:05:47.468202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.