« Volver al listado

CVE-2023-40216

Estado: ModificadaMedia (5.5)—

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Openbsd — Openbsd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-40216",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-40216",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-09T20:23:35.471808Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-08-10T16:15:09.907",
  "references": [
    {
      "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences."
    },
    {
      "lang": "es",
      "value": "OpenBSD 7.3 antes de la errata 014 carece de una comprobación de límites de recuento de argumentos en la emulación de terminal de consola. Esto podría provocar un acceso incorrecto a la memoria y un bloqueo del kernel tras recibir secuencias de escape de terminal DCS o CSI falsificadas."
    }
  ],
  "lastModified": "2026-06-17T06:16:46.587",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BAA0C9B-7CEA-4647-809F-027EB34C142E"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3CC37B8-46C0-407B-8DE4-2B5BC36BA969"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D53FE3CA-1A90-4783-8AC2-C0B4CF6F052D"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C32DD2B-BBE0-4031-B105-743E4058B4A1"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F481F84-81C2-4E5F-BD60-4C46CD3DD603"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCAE527B-1176-4759-B903-59A72245517B"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90AFDC54-DCAD-46F5-8198-3632335D5529"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_007:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7289DE0-7A7C-4535-BCA8-23D882468D28"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_008:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40791FF0-EFA3-4471-BCEB-0E1F36ABF973"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_009:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AE8017A-F84D-4A8E-BAF0-8AC795D74FFC"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_010:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FFFC349B-AA6F-4286-8440-699D1F8A934A"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_011:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5AD12A6-74D4-4696-8126-402E61995D2C"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_012:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9921E2D-DC9B-46FB-A01F-540C4B721D50"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.3:errata_013:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEFF0DA3-7CF7-42EB-9AA8-914EFD83466A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}