Lucene search

K
nvd[email protected]NVD:CVE-2023-40216
HistoryAug 10, 2023 - 4:15 p.m.

CVE-2023-40216

2023-08-1016:15:09
CWE-862
web.nvd.nist.gov
1
openbsd
bounds check
console terminal emulation
kernel crash
crafted escape sequences

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.2%

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

Affected configurations

NVD
Node
openbsdopenbsdMatch7.3-
OR
openbsdopenbsdMatch7.3errata_001
OR
openbsdopenbsdMatch7.3errata_002
OR
openbsdopenbsdMatch7.3errata_003
OR
openbsdopenbsdMatch7.3errata_004
OR
openbsdopenbsdMatch7.3errata_005
OR
openbsdopenbsdMatch7.3errata_006
OR
openbsdopenbsdMatch7.3errata_007
OR
openbsdopenbsdMatch7.3errata_008
OR
openbsdopenbsdMatch7.3errata_009
OR
openbsdopenbsdMatch7.3errata_010
OR
openbsdopenbsdMatch7.3errata_011
OR
openbsdopenbsdMatch7.3errata_012
OR
openbsdopenbsdMatch7.3errata_013

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.2%

Related for NVD:CVE-2023-40216