CVE-2023-40216: Medium severity openbsd vulnerability
Published Aug 10, 2023
·Updated
OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.
Affected Software
14 affected components
OpenBSD OpenBSD=7.3
OpenBSD OpenBSD=7.3-errata_001
OpenBSD OpenBSD=7.3-errata_002
OpenBSD OpenBSD=7.3-errata_003
OpenBSD OpenBSD=7.3-errata_004
OpenBSD OpenBSD=7.3-errata_005
OpenBSD OpenBSD=7.3-errata_006
OpenBSD OpenBSD=7.3-errata_007
OpenBSD OpenBSD=7.3-errata_008
OpenBSD OpenBSD=7.3-errata_009
OpenBSD OpenBSD=7.3-errata_010
OpenBSD OpenBSD=7.3-errata_011
OpenBSD OpenBSD=7.3-errata_012
OpenBSD OpenBSD=7.3-errata_013
Remediation
Event History
Aug 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-40216?
The severity of CVE-2023-40216 is medium with a severity value of 5.5.
2
How does CVE-2023-40216 affect OpenBSD?
CVE-2023-40216 affects OpenBSD version 7.3 before errata 014.
3
What is the impact of CVE-2023-40216?
CVE-2023-40216 could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.
4
How can I fix CVE-2023-40216?
To fix CVE-2023-40216, apply the OpenBSD 7.3 errata 014 or later.
5
Where can I find more information about CVE-2023-40216?
You can find more information about CVE-2023-40216 at the following references: [link1], [link2].