CVE-2023-52558

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52558", "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725", "state": "PUBLISHED", "assignerShortName": "cisa-cg", "dateReserved": "2024-03-01T16:04:51.307Z", "datePublished": "2024-03-01T16:33:06.604Z", "dateUpdated": "2024-11-19T21:42:52.858Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "OpenBSD", "repo": "https://github.com/openbsd/src/", "vendor": "OpenBSD", "versions": [{"lessThan": "7.3 errata 019", "status": "affected", "version": "7.3 ", "versionType": "custom"}, {"lessThan": "7.4 errata 002", "status": "affected", "version": "7.4", "versionType": "custom"}]}], "datePublic": "2023-10-25T00:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences."}], "value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a\u00a0network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-131", "description": "CWE-131 Incorrect Calculation of Buffer Size", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9119a7d8-5eab-497f-8521-727c672e3725", "shortName": "cisa-cg", "dateUpdated": "2024-03-01T16:39:00.281Z"}, "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"}, {"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"}, {"url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}], "source": {"discovery": "UNKNOWN"}, "title": "OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "openbsd", "product": "openbsd", "cpes": ["cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.3", "status": "affected", "lessThan": "7.3_errata_019", "versionType": "custom"}, {"version": "7.4", "status": "affected", "lessThan": "7.4_errata_002", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-11-19T21:41:24.595292Z", "id": "CVE-2023-52558", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-19T21:42:52.858Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:20.692Z"}, "title": "CVE Program Container", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig", "tags": ["x_transferred"]}, {"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig", "tags": ["x_transferred"]}, {"url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig", "tags": ["x_transferred"]}, {"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig", "tags": ["x_transferred"]}, {"url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:20.692Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-52558", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-19T21:41:24.595292Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*"], "vendor": "openbsd", "product": "openbsd", "versions": [{"status": "affected", "version": "7.3", "lessThan": "7.3_errata_019", "versionType": "custom"}, {"status": "affected", "version": "7.4", "lessThan": "7.4_errata_002", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:41.211Z"}}], "cna": {"title": "OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash", "source": {"discovery": "UNKNOWN"}, "affected": [{"repo": "https://github.com/openbsd/src/", "vendor": "OpenBSD", "product": "OpenBSD", "versions": [{"status": "affected", "version": "7.3 ", "lessThan": "7.3 errata 019", "versionType": "custom"}, {"status": "affected", "version": "7.4", "lessThan": "7.4 errata 002", "versionType": "custom"}], "defaultStatus": "affected"}], "datePublic": "2023-10-25T00:00:00.000Z", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"}, {"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"}, {"url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a\u00a0network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.", "supportingMedia": [{"type": "text/html", "value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-131", "description": "CWE-131 Incorrect Calculation of Buffer Size"}]}], "providerMetadata": {"orgId": "9119a7d8-5eab-497f-8521-727c672e3725", "shortName": "cisa-cg", "dateUpdated": "2024-03-01T16:39:00.281Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52558", "state": "PUBLISHED", "dateUpdated": "2024-11-19T21:42:52.858Z", "dateReserved": "2024-03-01T16:04:51.307Z", "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725", "datePublished": "2024-03-01T16:33:06.604Z", "assignerShortName": "cisa-cg"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "OpenBSD", "repo": "https://github.com/openbsd/src/", "vendor": "OpenBSD", "versions": [{"lessThan": "7.3 errata 019", "status": "affected", "version": "7.3 ", "versionType": "custom"}, {"lessThan": "7.4 errata 002", "status": "affected", "version": "7.4", "versionType": "custom"}]}], "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"affectedData": [{"cpes": ["cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "openbsd", "vendor": "openbsd", "versions": [{"lessThan": "7.3_errata_019", "status": "affected", "version": "7.3", "versionType": "custom"}, {"lessThan": "7.4_errata_002", "status": "affected", "version": "7.4", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*", "matchCriteriaId": "131B4208-6843-40D3-8818-159D1204BD0E", "versionEndExcluding": "7.3", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:-:*:*:*:*:*:*", "matchCriteriaId": "7BAA0C9B-7CEA-4647-809F-027EB34C142E", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_001:*:*:*:*:*:*", "matchCriteriaId": "B3CC37B8-46C0-407B-8DE4-2B5BC36BA969", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_002:*:*:*:*:*:*", "matchCriteriaId": "D53FE3CA-1A90-4783-8AC2-C0B4CF6F052D", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_003:*:*:*:*:*:*", "matchCriteriaId": "9C32DD2B-BBE0-4031-B105-743E4058B4A1", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_004:*:*:*:*:*:*", "matchCriteriaId": "3F481F84-81C2-4E5F-BD60-4C46CD3DD603", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_005:*:*:*:*:*:*", "matchCriteriaId": "DCAE527B-1176-4759-B903-59A72245517B", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_006:*:*:*:*:*:*", "matchCriteriaId": "90AFDC54-DCAD-46F5-8198-3632335D5529", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_007:*:*:*:*:*:*", "matchCriteriaId": "C7289DE0-7A7C-4535-BCA8-23D882468D28", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_008:*:*:*:*:*:*", "matchCriteriaId": "40791FF0-EFA3-4471-BCEB-0E1F36ABF973", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_009:*:*:*:*:*:*", "matchCriteriaId": "2AE8017A-F84D-4A8E-BAF0-8AC795D74FFC", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_010:*:*:*:*:*:*", "matchCriteriaId": "FFFC349B-AA6F-4286-8440-699D1F8A934A", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_011:*:*:*:*:*:*", "matchCriteriaId": "B5AD12A6-74D4-4696-8126-402E61995D2C", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_012:*:*:*:*:*:*", "matchCriteriaId": "A9921E2D-DC9B-46FB-A01F-540C4B721D50", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_013:*:*:*:*:*:*", "matchCriteriaId": "CEFF0DA3-7CF7-42EB-9AA8-914EFD83466A", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_014:*:*:*:*:*:*", "matchCriteriaId": "2745D88C-769F-476C-AF70-29EDF609DC55", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_015:*:*:*:*:*:*", "matchCriteriaId": "9E14AA44-11A5-466D-8C56-C0618F99AC51", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_016:*:*:*:*:*:*", "matchCriteriaId": "780A311D-A244-41A9-B5DB-C4B551F33C3D", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_017:*:*:*:*:*:*", "matchCriteriaId": "C5EE5EE8-0CFB-488C-B4C4-20E3D86C19F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_018:*:*:*:*:*:*", "matchCriteriaId": "7D2ABF3D-72F5-49BE-B2D4-B38BFA359A4D", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.4:-:*:*:*:*:*:*", "matchCriteriaId": "AC3B964B-B0DA-4ED4-92CA-22CA55FB1799", "vulnerable": true}, {"criteria": "cpe:2.3:o:openbsd:openbsd:7.4:errata_001:*:*:*:*:*:*", "matchCriteriaId": "6AFCBC1B-71F7-48E0-B276-8FDC3150E6CD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a\u00a0network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences."}, {"lang": "es", "value": "En OpenBSD 7.4 anterior a la errata 002 y OpenBSD 7.3 anterior a la errata 019, un b\u00fafer de red que ten\u00eda que dividirse en cierta longitud pod\u00eda bloquear el kernel despu\u00e9s de recibir secuencias de escape especialmente manipuladas."}], "id": "CVE-2023-52558", "lastModified": "2026-06-17T06:43:01.303", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-52558", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-11-19T21:41:24.595292Z", "version": "2.0.3"}}]}, "published": "2024-03-01T17:15:07.330", "references": [{"source": "9119a7d8-5eab-497f-8521-727c672e3725", "tags": ["Patch"], "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"}, {"source": "9119a7d8-5eab-497f-8521-727c672e3725", "tags": ["Patch"], "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"}, {"source": "9119a7d8-5eab-497f-8521-727c672e3725", "tags": ["Patch"], "url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}], "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-131"}], "source": "9119a7d8-5eab-497f-8521-727c672e3725", "type": "Secondary"}]}

{}

{}