CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

2024-03-0116:33:06

CWE-131

cisa-cg

github.com

cve-2023-52558 openbsd 7.4 openbsd 7.3 m_split() network buffer crash kernel crafted escape sequences

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

CNA Affected

[
  {
    "repo": "https://github.com/openbsd/src/",
    "vendor": "OpenBSD",
    "product": "OpenBSD",
    "versions": [
      {
        "status": "affected",
        "version": "7.3 ",
        "lessThan": "7.3 errata 019",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.4",
        "lessThan": "7.4 errata 002",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]