CVE-2023-52558

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-52558

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52558.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-52558

Published

2024-03-01T16:33:06Z

Modified

2026-10-28T10:36:16Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

Details

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

Database specific

{
    "cna_assigner":  "cisa-cg",
    "cwe_ids":  [
        "CWE-131"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52558.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "7.3 "
                        },
                        {
                            "fixed":  "7.3 errata 019"
                        },
                        {
                            "introduced":  "7.4"
                        },
                        {
                            "fixed":  "7.4 errata 002"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandardRange"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/openbsd/src

Affected ranges

Type

GIT

Repo

https://github.com/openbsd/src

Events

Introduced

Fixed

7b4d35e0a60ba1dd4daf4b1c2932020a22463a89

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52558.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "46502598568160444598167126405384384467",
            "length":  1572
        },
        "id":  "CVE-2023-52558-3c8644d3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89",
        "target":  {
            "file":  "sys/kern/uipc_mbuf.c",
            "function":  "m_split"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "18826532681357168538885630250623118528",
                "208507628955484073683702949633440600983",
                "2080885333745150700561845751671639331",
                "89895733001765665309302998758346422838",
                "59335741728663087364364173232009969616",
                "148271697839417804784550699930830467107",
                "180499750560302076385168748834556156388",
                "117306014622691515105127189987765067409",
                "226683871486831769809714604657428110322",
                "166023762622782887105665811077060517189",
                "318934717742829765345061293651743046276",
                "269541241225174932519692516199388882312",
                "210514193385166184940889449037119218132",
                "124082383872145259506030068534537682160",
                "211329782220123943023841744036895147733",
                "141713436661836001061627553917526523702",
                "216038237589439030092187283571408967062",
                "182521177302042261167035661595220648724",
                "14256946832875719373256052803539852285",
                "301641543031619095964344725741352560036",
                "8482516333856393104368961440455606275",
                "190181292488794614942096582575020416278",
                "221861260774560545317219743735187279437"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-52558-76f6205e",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89",
        "target":  {
            "file":  "sys/kern/uipc_mbuf.c"
        }
    }
]

vanir_signatures_modified

"2026-10-28T10:36:16Z"