Skip to content
OpenAdvisories
Medium WID-SEC-2024-0531 3 CVEs

OpenBSD: Mehrere Schwachstellen ermöglichen Denial of Service

Published Mar 3, 2024 · Updated Mar 3, 2024 · de-DE

Vendor: OpenBSD Product: OpenBSD

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in OpenBSD ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.

Product

OpenBSD ist ein Unix-artiges Betriebssystem, abgeleitet von BSD-Unix.

Vulnerabilities 3

  • High 7.5
    CVE-2023-52557

    OpenBSD 7.3 invalid l2tp message npppd crash

    In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

    OpenBSD OpenBSD
  • High 7.5
    CVE-2023-52558

    OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

    In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

    OpenBSD OpenBSD
  • Medium 6.2
    CVE-2023-52556

    OpenBSD 7.4 pf state race condition kernel crash

    In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic.

    OpenBSD OpenBSD

Revision history

  1. #1

    Initiale Fassung

References