CVEs-PoC/2021/CVE-2021-28040.md

CVE-2021-28040

Description

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached.

POC

Reference

• https://github.com/ossec/ossec-hids/issues/1953
• https://github.com/ossec/ossec-hids/issues/1953

Github

• https://github.com/FUAZA/ECE9069_Presentation_2