CVE-2023-40216
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.
OpenBSD 7.3 antes de la errata 014 carece de una comprobación de límites de recuento de argumentos en la emulación de terminal de consola. Esto podría provocar un acceso incorrecto a la memoria y un bloqueo del kernel tras recibir secuencias de escape de terminal DCS o CSI falsificadas.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-08-10 CVE Reserved
- 2023-08-10 CVE Published
- 2023-08-11 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig | 2023-08-23 | |
| https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c | 2023-08-23 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | - |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_001 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_002 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_003 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_004 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_005 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_006 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_007 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_008 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_009 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_010 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_011 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_012 |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 7.3 Search vendor "Openbsd" for product "Openbsd" and version "7.3" | errata_013 |
Affected
| ||||||