CVE-2023-7340

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the authentication daemon.

CVSS v3 3.5 LOW

3.5^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/wazuh/wazuh/security/advisories/GHSA-grjq-p5fg-m24r	Exploit Vendor Advisory
https://www.vulncheck.com/advisories/heap-buffer-overflow-in-wazuh-authd	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:wazuh:wazuh::::::::
	cpe:2.3:a:wazuh:wazuh:4.3.10:::::::*

History

28 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Wazuh authd contiene una vulnerabilidad de desbordamiento de búfer de pila que permite a los atacantes causar corrupción de memoria y datos de pila malformados mediante el envío de una entrada especialmente diseñada. Los atacantes pueden explotar esta vulnerabilidad para desencadenar una condición de denegación de servicio, lo que resulta en un bajo impacto en la disponibilidad del demonio de autenticación.

Information

Published : 2026-03-27 16:16

Updated : 2026-10-28 19:10

NVD link : CVE-2023-7340

Mitre link : CVE-2023-7340

CVE.ORG link : CVE-2023-7340

JSON object : View

Products Affected

wazuh

wazuh

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2023-7340", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-7340", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T16:55:39.979053Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Wazuh", "product": "Wazuh", "versions": [{"status": "affected", "version": "3.5.0", "versionType": "semver", "lessThanOrEqual": "4.3.10"}], "platforms": ["Linux"], "packageName": "os_auth", "defaultStatus": "unaffected"}]}], "published": "2026-03-27T16:16:20.427", "references": [{"url": "https://github.com/wazuh/wazuh/security/advisories/GHSA-grjq-p5fg-m24r", "tags": ["Exploit", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/heap-buffer-overflow-in-wazuh-authd", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the authentication daemon."}, {"lang": "es", "value": "Wazuh authd contiene una vulnerabilidad de desbordamiento de b\u00fafer de pila que permite a los atacantes causar corrupci\u00f3n de memoria y datos de pila malformados mediante el env\u00edo de una entrada especialmente dise\u00f1ada. Los atacantes pueden explotar esta vulnerabilidad para desencadenar una condici\u00f3n de denegaci\u00f3n de servicio, lo que resulta en un bajo impacto en la disponibilidad del demonio de autenticaci\u00f3n."}], "lastModified": "2026-10-28T19:10:00.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37C53987-5376-4F61-AE83-F2C00BA198E3", "versionEndIncluding": "3.5.0"}, {"criteria": "cpe:2.3:a:wazuh:wazuh:4.3.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0F696D6-51E3-49B9-979D-1A202A7044C8"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}