CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

2024-03-0116:33:06

CWE-131

cisa-cg

www.cve.org

openbsd

network buffer

kernel crash

cve-2023-52558

m_split()

errata 002

errata 019

escape sequences

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "OpenBSD",
    "repo": "https://github.com/openbsd/src/",
    "vendor": "OpenBSD",
    "versions": [
      {
        "lessThan": "7.3 errata 019",
        "status": "affected",
        "version": "7.3 ",
        "versionType": "custom"
      },
      {
        "lessThan": "7.4 errata 002",
        "status": "affected",
        "version": "7.4",
        "versionType": "custom"
      }
    ]
  }
]