CVE-2023-40216

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-40216
OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig Patch Vendor Advisory
https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c Patch
https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig Patch Vendor Advisory
https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:openbsd:openbsd:7.3:-:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_001:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_002:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_003:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_004:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_005:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_006:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_007:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_008:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_009:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_010:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_011:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_012:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:7.3:errata_013:*:*:*:*:*:*
History

21 Nov 2024, 08:19

Type Values Removed Values Added
Summary
  • (es) OpenBSD 7.3 antes de la errata 014 carece de una comprobación de límites de recuento de argumentos en la emulación de terminal de consola. Esto podría provocar un acceso incorrecto a la memoria y un bloqueo del kernel tras recibir secuencias de escape de terminal DCS o CSI falsificadas.
References () https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig - Patch, Vendor Advisory () https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig - Patch, Vendor Advisory
References () https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c - Patch () https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c - Patch
Information

Published : 2023-08-10 16:15

Updated : 2024-11-21 08:19

NVD link : CVE-2023-40216

Mitre link : CVE-2023-40216

CVE.ORG link : CVE-2023-40216

JSON object : View

Products Affected

openbsd

  • openbsd
CWE
CWE-862

Missing Authorization