CVE-2023-40216

Published: Aug 10, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

Affected (14)

Products: Openbsd: Openbsd

Openbsd

1 product

Openbsd

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Version 7.3
Openbsd Openbsd	Version 7.3 errata_001
Openbsd Openbsd	Version 7.3 errata_002
Openbsd Openbsd	Version 7.3 errata_003
Openbsd Openbsd	Version 7.3 errata_004
Openbsd Openbsd	Version 7.3 errata_005
Openbsd Openbsd	Version 7.3 errata_006
Openbsd Openbsd	Version 7.3 errata_007
Openbsd Openbsd	Version 7.3 errata_008
Openbsd Openbsd	Version 7.3 errata_009
Openbsd Openbsd	Version 7.3 errata_010
Openbsd Openbsd	Version 7.3 errata_011
Openbsd Openbsd	Version 7.3 errata_012
Openbsd Openbsd	Version 7.3 errata_013