CVE-2023-52558

moderate-risk
Published 2024-03-01

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

Do I need to act?

-
0.07% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Openbsd

References (6)

Patch https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig
Patch https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig
Patch https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89
Patch https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig
Patch https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig
Patch https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89
46
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 0/34 · Minimal
Exposure 20/34 · Moderate