CVE-2021-28040

https://notcve.org/view.php?id=CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached. Se detectó un problema en OSSEC versión 3.6.0. Se presenta una vulnerabilidad de recursividad no controlada en el archivo os_xml.c cuando es usada una gran cantidad de etiquetas XML de apertura y cierre. • https://github.com/ossec/ossec-hids/issues/1953 • CWE-674: Uncontrolled Recursion •