CVE-2025-30334

Estado: AnalizadaAlta (7.1)—

In OpenBSD 7.6 before errata 006 and OpenBSD 7.5 before errata 015, traffic sent over wg(4) could result in kernel crash.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Puntuación base: 7.1

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.44%
Percentil entre todas las CVEs puntuadas: 36
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1210 Exploitation of Remote Serviceslateral movement75 %
Impacto principalT1499.004 Application or System Exploitationimpact70 %

Vulnerabilidad en wg(4) de OpenBSD accesible por red (AV:N) con PR:L que causa kernel crash (DoS). T1210 por acceso remoto con privilegios; T1499.004 (endpoint DoS) por crash del kernel.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability Scanning Threat Intelligence Program Privileged Account Management Network Segmentation Filter Network Traffic Disable or Remove Feature or Program

Tecnologías afectadas (1)

Openbsd — Openbsd

CWE

CWE-131

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2025-30334",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "ssvcData": {
          "id": "CVE-2025-30334",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-05T19:18:47.764235Z"
        }
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-30334",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-21T15:21:31.344583Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "9119a7d8-5eab-497f-8521-727c672e3725",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 7.1,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "affectedData": [
        {
          "vendor": "OpenBSD",
          "product": "OpenBSD",
          "versions": [
            {
              "status": "affected",
              "version": "7.6",
              "lessThan": "7.6 errata 006",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.6 errata 008"
            },
            {
              "status": "affected",
              "version": "7.5",
              "lessThan": "7.5 errata 015",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "7.5 errata 015"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2025-03-20T21:15:24.063",
  "references": [
    {
      "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/015_wg.patch.sig",
      "tags": [
        "Patch"
      ],
      "source": "9119a7d8-5eab-497f-8521-727c672e3725"
    },
    {
      "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/006_wg.patch.sig",
      "tags": [
        "Patch"
      ],
      "source": "9119a7d8-5eab-497f-8521-727c672e3725"
    },
    {
      "url": "https://github.com/openbsd/src/commit/c06199859734d958552a581d72b4c0f910e68d7c",
      "tags": [
        "Patch"
      ],
      "source": "9119a7d8-5eab-497f-8521-727c672e3725"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "9119a7d8-5eab-497f-8521-727c672e3725",
      "description": [
        {
          "lang": "en",
          "value": "CWE-131"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In OpenBSD 7.6 before errata 006 and OpenBSD 7.5 before errata 015, traffic sent over wg(4) could result in kernel crash."
    },
    {
      "lang": "es",
      "value": "En OpenBSD 7.6 antes de la errata 006 y OpenBSD 7.5 antes de la errata 015, el tráfico enviado a través de wg(4) podía provocar un bloqueo del núcleo."
    }
  ],
  "lastModified": "2026-06-17T09:08:32.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2860A945-6081-48DE-BB23-772F70C5B048",
              "versionEndExcluding": "7.5"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B617B889-AA08-445C-BE82-E52D4FF50CB0"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B4164F1-5C01-499E-A63F-92D84DE4FD24"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3835135E-8993-4440-9F85-ECD538829C2D"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FA5B7BE-B562-4D61-BFFE-E49EA2E4E3F5"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9236A21-9E74-4165-B464-DA774D4D5832"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6AF2A16-BF25-429F-8009-1022EAE72087"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09F780CD-B3DA-4A90-A359-5A3C21A6C96F"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_007:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF19BE3A-2806-4705-8F15-E84C334018C7"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_008:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F38E6CAD-FB41-4284-A885-F024C77AA5BA"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_009:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4B9950C-FB43-4765-B123-487B43BAB4A3"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_010:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A758C81E-8EBC-4934-9787-79E5D4E393A0"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_011:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21349827-23D3-4FA4-B5B3-AE02F6C09FF6"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_012:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E352FFA5-5517-4D13-BF9E-16F462A4A552"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_013:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DC8E7BF-DD85-4506-856C-41C6674507F6"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.5:errata_014:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E07B230-CE2F-4CE8-A175-88C0DCBB6821"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.6:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B87E1AA8-46FE-4C28-AF5A-0FF262DE31CE"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.6:errata_001:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E564353A-4C90-4917-AC7D-330DEABD4987"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.6:errata_002:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8920EE6-B411-49EA-AB29-7D7795FBFD18"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.6:errata_003:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC2F5187-3B0E-4DF0-BF0B-868E3B34C550"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.6:errata_004:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "298161C1-8C26-482B-B8E2-2D6AEAEA462C"
            },
            {
              "criteria": "cpe:2.3:o:openbsd:openbsd:7.6:errata_005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A550A615-C8E6-47E6-81CA-E3E2BC17A8AA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725"
}