os_auth vulnerabilities
CVEs whose affected-version data names the os_auth package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2023-7340Low· 3.5PoCWazuh authd service (os_auth) Heap-based Buffer Overflow
Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of servic…
▾ TwilightWazuh · os_authEPSS 0.33%via CVEORG
CVE-2026-32984Low· 3.5Heap buffer overflow in wazuh-authd
Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of servic…
▾ SunlitWazuh · os_authEPSS 0.30%via CVEORG