Buffer Overflow Vulnerability in Wazuh Threat Detection Platform

CVE-2025-62789

What is CVE-2025-62789?

Wazuh, an open-source platform utilized for threat detection and response, has a vulnerability in its fim_alert() function prior to version 4.11.0. This flaw arises from the failure to verify whether the return value of ctime_r is NULL before utilizing it with strdup(). An attacker can exploit this weakness by sending a specially constructed message to the Wazuh manager, potentially leading to a crash of the analysis daemon (analysisd) and resulting in system unavailability. The issue has been addressed in version 4.11.0.

References