CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...

CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...

CVE-2023-52558

The OpenBSD operating system is vulnerable to a kernel crash in versions 7.3 (before errata 019) and 7.4 (before errata 002). The root cause is a network buffer issue where a buffer requiring splitting at specific lengths can be triggered by specially crafted escape sequences . This vulnerability...

CVE-2023-52557 OpenBSD 7.3 invalid l2tp message npppd crash

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52557

In OpenBSD 7.3 prior to errata 016 , the npppd(8) component is vulnerable to a crash caused by receiving an L2TP message containing an AVP (Attribute-Value Pair) with an incorrect length. This issue is associated with CWE-131 (Incorrect Calculation of Buffer Size) and CWE-805 (Buffer Access with ...

CVE-2023-52557

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52557 OpenBSD 7.3 invalid l2tp message npppd crash

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

CVE-2023-52556

In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...

CVE-2023-52556 OpenBSD 7.4 pf state race condition kernel crash

In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...

CVE-2023-52556 OpenBSD 7.4 pf state race condition kernel crash

In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...

CVE-2023-52556

A race condition exists in OpenBSD 7.4 (prior to errata 009 ) within the pf(4) component. The vulnerability stems from a timing issue between the processing of packets and the expiration of packet states, which can lead to a kernel panic . To mitigate this risk, users are recommended to apply err...

OpenBSD Security Vulnerabilities

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. A security vulnerability exists in versions prior to OpenBSD 7.4 errata 009, which stems from pf4 A race condition between packet processing and packet state expiration may cause a kernel...

OpenBSD Security Vulnerabilities

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project team. A security vulnerability exists in OpenBSD versions prior to OpenBSD 7.4 errata 002, and prior to OpenBSD 7.3 errata 019, which stems from a kernel crash after receiving a specially crafted...

OpenBSD Security Vulnerabilities

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. A security vulnerability exists in versions prior to OpenBSD 7.3 errata 016, which stems from an l2tp message containing an AVP of incorrect length that causes a crash...

PT-2024-14626

Name of the Vulnerable Software and Affected Versions OpenBSD version 7.4 before errata 009 Description A race condition exists between pf4's processing of packets and expiration of packet states, which may cause a kernel panic. Recommendations For OpenBSD version 7.4 before errata 009, apply...

CVE-2023-52558: Incorrect Calculation of Buffer Size

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...

CVE-2023-52557: Incorrect Calculation of Buffer Size

In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...

PT-2024-14627

Name of the Vulnerable Software and Affected Versions OpenBSD version 7.3 Description The issue is related to a crash in npppd8 caused by an L2TP message containing an AVP Attribute-Value Pair with an incorrect length. Recommendations For OpenBSD version 7.3, apply errata 016 to resolve the issue...

PT-2024-14628

Name of the Vulnerable Software and Affected Versions OpenBSD versions 7.3 through 7.4 before errata 019 and 002 respectively OpenBSD version 7.3 before errata 019 OpenBSD version 7.4 before errata 002 Description A network buffer issue exists where a buffer that had to be split at a certain leng...

CVE-2023-52556: Time-of-check Time-of-use (TOCTOU) Race Condition

In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...