PT-2024-14628 · Openbsd · Openbsd

Published 2024-03-01 · Updated 2025-10-10 · CVE-2023-52558

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenBSD versions 7.3 through 7.4 before errata 019 and 002 respectively OpenBSD version 7.3 before errata 019 OpenBSD version 7.4 before errata 002

Description A network buffer issue exists where a buffer that had to be split at a certain length could crash the kernel after receiving specially crafted escape sequences.

Recommendations For OpenBSD version 7.3, apply errata 019 to resolve the issue. For OpenBSD version 7.4, apply errata 002 to resolve the issue.

Fix

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2023-52558

Affected Products

Openbsd

References · 7

• https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52558 · Security Note
• https://osv.dev/vulnerability/CVE-2023-52558 · Vendor Advisory
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig · Patch
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig · Patch
• https://t.me/cveNotify/138187 · Telegram Post
• https://twitter.com/vuldb/status/1763719122842726542 · Twitter Post