Approved changes feed: RSS · Atom

cpe:2.3:a:wazuh:wazuh_manager:3.8.0:*:*:*:*:*:*:*

part: a version: 3.8.0 update: *

VendorWazuh (a7402332-cdfc-5fc8-bb0e-3f511f6cb7fd)
ProductWazuh Manager (25e64ce2-8e82-527a-9f15-7b9b0b39e9c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32038 vulnerable 2026-06-08 06:35:32.658763 Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability
CRITICAL (9.8)
Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd when handling Unicode characters from Windows Eventchannel messages. It impacts Wazuh Manager 3.8.0 and above. This vulnerability is fixed in Wazuh Manager 4.7.2.
Published: 2024-04-19T14:31:00.581Z
Updated: 2024-08-02T02:06:42.823Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.