CVE-2023-52558: OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
Published Mar 1, 2024
·Updated
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.
Affected Software
23 affected components
OpenBSD OpenBSD<7.4, <7.3
OpenBSD OpenBSD<7.3
OpenBSD OpenBSD=7.3
OpenBSD OpenBSD=7.3-errata_001
OpenBSD OpenBSD=7.3-errata_002
OpenBSD OpenBSD=7.3-errata_003
OpenBSD OpenBSD=7.3-errata_004
OpenBSD OpenBSD=7.3-errata_005
OpenBSD OpenBSD=7.3-errata_006
OpenBSD OpenBSD=7.3-errata_007
OpenBSD OpenBSD=7.3-errata_008
OpenBSD OpenBSD=7.3-errata_009
OpenBSD OpenBSD=7.3-errata_010
OpenBSD OpenBSD=7.3-errata_011
OpenBSD OpenBSD=7.3-errata_012
OpenBSD OpenBSD=7.3-errata_013
OpenBSD OpenBSD=7.3-errata_014
OpenBSD OpenBSD=7.3-errata_015
OpenBSD OpenBSD=7.3-errata_016
OpenBSD OpenBSD=7.3-errata_017
OpenBSD OpenBSD=7.3-errata_018
OpenBSD OpenBSD=7.4
OpenBSD OpenBSD=7.4-errata_001
Remediation
Event History
Mar 1, 2024
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-52558?
CVE-2023-52558 is classified as a medium severity vulnerability affecting OpenBSD.
2
How do I fix CVE-2023-52558?
To fix CVE-2023-52558, apply the relevant patches from OpenBSD for versions 7.3 and 7.4.
3
What versions of OpenBSD are affected by CVE-2023-52558?
CVE-2023-52558 affects OpenBSD versions 7.3 before errata 019 and 7.4 before errata 002.
4
What is the impact of CVE-2023-52558?
The impact of CVE-2023-52558 may lead to a kernel crash when processing specially crafted escape sequences.
5
Is CVE-2023-52558 related to network security?
Yes, CVE-2023-52558 involves a network buffer issue that can affect the stability of the OpenBSD kernel.