Wazuh v4.14.6 Security Patch: Vulnerabilities in Manager, Agent, and RESTful API

Vulnerability Overview Vulnerability Name: Multiple security vulnerability fixes Affected Version: Wazuh v4.14.6 Release Date: July 3, 2023 Impact Scope Manager: - Improper handling of message decompression - Insufficient validation of agent names - Deadlock issue in the vulnerability scanner module - String buffer handling issues - Security issues in cluster file synchronization - Error handling in cluster file synchronization - Validation of cluster merge file parameters - Validation of temporary file paths - Validation of cluster non-merge file paths - Validation of cluster node name formats - Issue with empty agent IP in inventory documentation - Status issues after hot reload of cluster worker nodes Agent: - Agent registration issues - MS Graph integration handling issues - macOS syscollector package receipt issues - eBPF create, modify, and delete event issues - FIM database path lookup issues RESTful API: - Control character issues in API usernames - Cluster result processing and authentication issues - User parsing issues Ruleset: - Rootcheck Trojan signature issues Other: - Cryptography library updates - eBPF library updates - Wazuh-manager startup failure issues Remediation Manager: - Improved handling of message decompression (#35773) - Improved validation of agent names (#35833) - Fixed deadlock issue in the vulnerability scanner module (#36011) - Fixed string buffer handling issues (#36059) - Improved security of cluster file synchronization (#36060) - Improved error handling for cluster file synchronization (#36129) - Improved validation of cluster merge file parameters (#36204) - Improved validation of temporary file paths (#36246) - Improved validation of cluster non-merge file paths (#36296) - Improved validation of cluster node name formats (#36460) - Fixed issue with empty agent IP in inventory documentation (#35475) - Fixed status issues after hot reload of cluster worker nodes (#6726) Agent: - Fixed agent registration issues (#35727) - Fixed MS Graph integration handling issues (#35431) - Fixed macOS syscollector package receipt issues (#35380) - Fixed eBPF create, modify, and delete event issues (#35838) - Fixed FIM database path lookup issues (#36399) RESTful API: - Fixed control character issues in API usernames (#35866) - Fixed cluster result processing and authentication issues (#35757) - Fixed user parsing issues (#35442) Ruleset: - Updated rootcheck Trojan signatures (#35927) Other: - Updated cryptography library (#35982) - Updated eBPF library (#36467) - Fixed Wazuh-manager startup failure issues (#36782) POC Code or Exploit Code No POC code or exploit code is included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

Wazuh v4.14.6 Security Patch: Vulnerabilities in Manager, Agent, and RESTful API

More from this source