CNNVD-202510-3971 Information
Oct 29, 2025
cve
CNNVD ID
CNNVD-202510-3971
Related CVE
- CNNVD Published: 2025-10-29
Description (Chinese)
Wazuh是Wazuh开源的一个应用软件。用于收集，汇总，索引和分析安全数据，帮助组织检测入侵，威胁和行为异常。 Wazuh 4.11.0之前版本存在代码问题漏洞，该漏洞源于未检查time_string是否为NULL，可能导致分析服务崩溃。
Description (English)
Wazuh is an application from the Wazuh Open Source. For collection, aggregation, indexing and analysis of security data to help the organization detect invasions, threats and behavioural anomalies. Wazuh 4.11.0 has a code problem loophole, which stems from the failure to check whether time string is NULL and could lead to the breakdown of analytical services.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
Wazuh
Published
2025-10-29
Last Modified
2026-02-24
References
https://github.com/wazuh/wazuh/security/advisories/GHSA-9xj3-vc52-48p9 https://access.redhat.com/security/cve/cve-2025-62790