{"affected":[{"defaultStatus":"unaffected","packageName":"os_auth","platforms":["Linux"],"product":"Wazuh","source":"CNA: VulnCheck","vendor":"Wazuh","versions":[{"lessThanOrEqual":"4.3.10","status":"affected","version":"3.5.0","versionType":"semver"}]}],"cveId":"CVE-2023-7340","cwes":["CWE-125"],"description":"Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the authentication daemon.","epss":{"date":"2026-11-08","percentile":0.26189,"score":0.00329},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0"},{"score":3.5,"severity":"low","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1794146388135,"publishedAt":1774626767751,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-grjq-p5fg-m24r"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/heap-buffer-overflow-in-wazuh-authd"}],"remediation":[],"revision":"e53c4dd1537146e19c404e058ae4a345b4005742130d76edf9ebefdd05966669","sources":[{"modifiedAt":1794146388135,"name":"CNA: VulnCheck","retrievedAt":1794146912404,"url":"https://www.cve.org/CVERecord?id=CVE-2023-7340"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150528701,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-7340"}],"ssvc":{"assessedAt":1774630539979,"automatable":"yes","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Wazuh authd service (os_auth) Heap-based Buffer Overflow","updatedAt":1794150528701}