PT-2025-12379 · Openbsd · Openbsd

Dhill · Published 2025-03-20 · Updated 2025-03-21 · CVE-2025-30334

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions OpenBSD versions 7.5 through 7.6 before errata 015 and 006 respectively OpenBSD version 7.5 before errata 015 OpenBSD version 7.6 before errata 006

Description The issue is related to traffic sent over wg(4), which could result in a kernel crash.

Recommendations For OpenBSD version 7.5, apply errata 015 to resolve the issue. For OpenBSD version 7.6, apply errata 006 to resolve the issue.

Fix

Weakness Enumeration

CWE-131

Related Identifiers

BDU:2025-10375

CVE-2025-30334

Affected Products

Openbsd

References · 12

• https://github.com/openbsd/src/commit/c06199859734d958552a581d72b4c0f910e68d7c · Patch
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/006_wg.patch.sig · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-30334 · Security Note
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/015_wg.patch.sig · Patch
• https://osv.dev/vulnerability/CVE-2025-30334 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10375 · Security Note
• https://twitter.com/CVEnew/status/1902831001157415021 · Twitter Post
• https://twitter.com/CVETracker/status/1903174963802304545 · Twitter Post
• https://t.me/cvenotify/115603 · Telegram Post
• https://t.me/cvetracker/19580 · Telegram Post
• https://t.me/latest_high_impact_cve/2015 · Telegram Post
• https://t.me/cvedetector/20771 · Telegram Post