cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-11149,https://securityvulnerability.io/vulnerability/CVE-2024-11149,VMX VMM Limit Restoration Issue,"OpenBSD version 7.4 prior to errata 014 contains a vulnerability in its virtual machine monitor (vmm) that fails to correctly restore General Descriptor Table Register (GDTR) limits on Intel VMX CPUs. This mismanagement can lead to improper memory handling within virtual machines, potentially allowing for unforeseen interactions or security lapses. Users of OpenBSD should apply the pertinent patches to safeguard their systems from this vulnerability.",OpenBSD,OpenBSD,7.9,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-12-06T01:56:12.697Z,0
CVE-2024-10933,https://securityvulnerability.io/vulnerability/CVE-2024-10933,Avoid Unexpected Directory Traversal on Untrusted File Systems,"In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.",OpenBSD,OpenBSD,5,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2024-12-05T20:06:23.001Z,0
CVE-2024-11148,https://securityvulnerability.io/vulnerability/CVE-2024-11148,OpenBSD 7.4 before errata 006 is vulnerable to NULL dereference in httpd,"The httpd(8) component in OpenBSD versions 7.3 and 7.4 is susceptible to a NULL dereference vulnerability. This flaw emerges when the server processes a malformed fastcgi request, leading to potential server disruptions or crashes. Implementing the latest patches provided in the respective errata is crucial for maintaining the integrity and availability of the service.",OpenBSD,OpenBSD,7.5,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-12-05T19:50:19.954Z,0
CVE-2024-10934,https://securityvulnerability.io/vulnerability/CVE-2024-10934,NFS Client and Server Vulnerability in OpenBSD Products,"A vulnerability exists within the NFS client and server implementations of OpenBSD versions prior to specific errata updates. This issue potentially allows for a double free of mbuf structures, which can lead to unexpected behavior or crashes. Moreover, the use of uninitialized variables in error handling further exacerbates the stability and security concerns of the NFS server. Users are advised to apply the relevant errata patches to mitigate these risks effectively.",OpenBSD,OpenBSD,,,0.0004299999854993075,false,false,false,false,,false,false,2024-11-15T20:15:00.000Z,0
CVE-2021-35000,https://securityvulnerability.io/vulnerability/CVE-2021-35000,Uninitialized Memory Information Disclosure Vulnerability,"The OpenBSD Kernel contains a vulnerability related to multicast routing that allows local attackers to potentially disclose sensitive information. This issue arises from uninitialized memory being accessed in the multicast routing implementation. An attacker must first run low-privileged code on the target system to exploit this vulnerability. By leveraging this flaw alongside other vulnerabilities, there is an opportunity for privilege escalation, enabling arbitrary code execution in the kernel context.",OpenBSD,Kernel,3.3,LOW,0.0006500000017695129,false,false,false,false,,false,false,2024-05-07T22:54:52.586Z,0
CVE-2021-34999,https://securityvulnerability.io/vulnerability/CVE-2021-34999,Uninitialized Memory Information Disclosure Vulnerability,"The OpenBSD Kernel contains a vulnerability in its multicast routing implementation, leading to the potential disclosure of sensitive information. This issue arises from uninitialized memory being accessed, which can be exploited by local attackers with low-privileged code execution rights. By leveraging this flaw in conjunction with other vulnerabilities, it may be possible for attackers to escalate their privileges and execute arbitrary code within the kernel context, posing significant security risks to the integrity of the system.",OpenBSD,Kernel,3.8,LOW,0.0006500000017695129,false,false,false,false,,false,false,2024-05-07T22:54:51.785Z,0
CVE-2023-52558,https://securityvulnerability.io/vulnerability/CVE-2023-52558,OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash,"In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.",OpenBSD,OpenBSD,,,0.00044999999227002263,false,false,false,false,,false,false,2024-03-01T16:33:06.604Z,0
CVE-2023-52557,https://securityvulnerability.io/vulnerability/CVE-2023-52557,npppd Crash Vulnerability in OpenBSD 7.3 Before Errata 016,"In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.
",OpenBSD,OpenBSD,,,0.0004299999854993075,false,false,false,false,,false,false,2024-03-01T16:14:56.065Z,0
CVE-2023-52556,https://securityvulnerability.io/vulnerability/CVE-2023-52556,Race Condition in OpenBSD 7.4 May Cause Kernel Panic,"In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic.
",OpenBSD,OpenBSD,,,0.0004299999854993075,false,false,false,false,,false,false,2024-03-01T16:08:49.203Z,0
CVE-2023-48795,https://securityvulnerability.io/vulnerability/CVE-2023-48795,OpenSSH vulnerability allows remote attackers to bypass integrity checks and downgrade security features,"The vulnerability in the SSH transport protocol with specific OpenSSH extensions may allow remote attackers to circumvent integrity checks, leading to the omission of some packets during the extension negotiation phase. Consequently, a client and server may establish a connection where certain security features are either downgraded or disabled, allowing for effective attacks against the protocol's security mechanisms such as ChaCha20-Poly1305 and CBC with Encrypt-then-MAC. The issue originates from improper handling of the handshake phase and sequence numbers within the SSH Binary Packet Protocol (BPP), opening various SSH implementations to potential exploitation.",OpenBSD,Openssh,5.9,MEDIUM,0.9548299908638,false,true,false,false,,true,false,2023-12-18T00:00:00.000Z,0
CVE-2023-51385,https://securityvulnerability.io/vulnerability/CVE-2023-51385,OS Command Injection Vulnerability in OpenSSH Before 9.6,"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.",OpenBSD,Openssh,6.5,MEDIUM,0.0034099998883903027,false,true,false,true,true,false,false,2023-12-18T00:00:00.000Z,0
CVE-2023-51384,https://securityvulnerability.io/vulnerability/CVE-2023-51384,Incomplete Destination Constraints in OpenSSH Affecting Key Management,"In OpenSSH versions prior to 9.6, a vulnerability exists within the ssh-agent related to the handling of destination constraints during the addition of PKCS#11-hosted private keys. The issue arises when these constraints are specified; they are only applied to the first added key, leading to potential security risks if multiple keys reside on the PKCS#11 token. This incomplete enforcement of constraints emphasizes the need for users to review their key management processes and update to the latest version of OpenSSH to mitigate associated risks.",OpenBSD,Openssh,5.5,MEDIUM,0.0004299999854993075,false,true,false,false,,false,false,2023-12-18T00:00:00.000Z,0
CVE-2023-40216,https://securityvulnerability.io/vulnerability/CVE-2023-40216,,OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.,OpenBSD,OpenBSD,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2023-08-10T00:00:00.000Z,0
CVE-2023-38408,https://securityvulnerability.io/vulnerability/CVE-2023-38408,Remote Code Execution Vulnerability in OpenSSH's ssh-agent Feature,"The ssh-agent feature in OpenSSH versions prior to 9.3p2 is susceptible to a vulnerability due to an insufficiently trusted search path. This flaw allows for remote code execution when an ssh-agent is forwarded to an attacker-controlled environment. The vulnerability stems from a legacy issue that was not thoroughly addressed in previous security updates, exposing users to potential exploitation through agent forwarding mechanisms.",OpenBSD,Openssh,9.8,CRITICAL,0.04293999820947647,false,false,false,true,true,false,false,2023-07-20T03:15:00.000Z,0
CVE-2023-35784,https://securityvulnerability.io/vulnerability/CVE-2023-35784,Double Free Vulnerability in OpenBSD and LibreSSL Products,"A vulnerability has been identified in OpenBSD versions 7.2 prior to errata 026 and 7.3 prior to errata 004, as well as in LibreSSL versions before 3.6.3 and 3.7.x before 3.7.3. The issue arises when SSL_clear is called, potentially leading to a double free or use after free situation. This flaw could be exploited to compromise application integrity and result in unexpected behavior, making it crucial for affected users to apply available patches immediately.",OpenBSD,"OpenBSD,Libressl",9.8,CRITICAL,0.003389999968931079,false,false,false,false,,false,false,2023-06-16T00:00:00.000Z,0
CVE-2021-46880,https://securityvulnerability.io/vulnerability/CVE-2021-46880,Authentication Bypass in LibreSSL and OpenBSD Products,"An authentication bypass vulnerability exists in LibreSSL and OpenBSD products due to an issue in the x509_verify.c component. This flaw arises because errors related to unverified certificate chains are occasionally ignored, enabling attackers to bypass authentication mechanisms. Users of impacted versions should apply necessary patches to mitigate potential security risks.",OpenBSD,"OpenBSD,Libressl",9.8,CRITICAL,0.0012499999720603228,false,false,false,false,,false,false,2023-04-15T00:15:00.000Z,0
CVE-2022-48437,https://securityvulnerability.io/vulnerability/CVE-2022-48437,,"An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.",OpenBSD,"OpenBSD,Libressl",5.3,MEDIUM,0.0006900000153109431,false,false,false,false,,false,false,2023-04-12T00:00:00.000Z,0
CVE-2023-29323,https://securityvulnerability.io/vulnerability/CVE-2023-29323,Remote Code Execution Vulnerability in OpenSMTPD by OpenBSD,"A flaw in the ascii_load_sockaddr function within smtpd of OpenBSD and OpenSMTPD allows for an abort when processing a connection from a local, scoped IPv6 address, potentially leading to service disruptions. This vulnerability requires immediate attention to ensure service reliability and security integrity.",OpenBSD,"OpenBSD,Opensmtpd",7.8,HIGH,0.00044999999227002263,false,false,false,false,,false,false,2023-04-04T23:15:00.000Z,0
CVE-2023-28531,https://securityvulnerability.io/vulnerability/CVE-2023-28531,Smartcard Key Management Vulnerability in OpenSSH by OpenBSD,"A security flaw exists in OpenSSH versions prior to 9.3, where the ssh-add tool inadvertently adds smartcard keys to the ssh-agent without enforcing the necessary per-hop destination constraints. This weakness allows for potential unauthorized access to sensitive resources by failing to properly limit the context in which keys are added. Users operating on affected versions should assess their security stance and consider implementing available mitigations.",OpenBSD,Openssh,9.8,CRITICAL,0.0015300000086426735,false,false,false,false,,false,false,2023-03-17T04:15:00.000Z,0
CVE-2023-27567,https://securityvulnerability.io/vulnerability/CVE-2023-27567,TCP Packet Vulnerability in OpenBSD Affects Kernel Stability,"In OpenBSD 7.2, a vulnerability exists when a TCP packet targeting destination port 0 is processed under a pf divert-to rule, potentially leading to a kernel crash. This situation can be exploited to disrupt the system’s stability, allowing for operational challenges and potential service interruptions. Immediate attention and patching are recommended to safeguard against this issue.",OpenBSD,OpenBSD,7.5,HIGH,0.0011899999808520079,false,false,false,false,,false,false,2023-03-03T00:00:00.000Z,0
CVE-2022-27882,https://securityvulnerability.io/vulnerability/CVE-2022-27882,,slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation.,OpenBSD,OpenBSD,7.5,HIGH,0.0026400000788271427,false,false,false,false,,false,false,2022-03-25T17:13:23.000Z,0
CVE-2022-27881,https://securityvulnerability.io/vulnerability/CVE-2022-27881,,engine.c in slaacd in OpenBSD 6.9 and 7.0 before 2022-02-21 has a buffer overflow triggerable by an IPv6 router advertisement with more than seven nameservers. NOTE: privilege separation and pledge can prevent exploitation.,OpenBSD,OpenBSD,7.5,HIGH,0.0020699999295175076,false,false,false,false,,false,false,2022-03-25T17:13:08.000Z,0
CVE-2021-36368,https://securityvulnerability.io/vulnerability/CVE-2021-36368,,"An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is ""this is not an authentication bypass, since nothing is being bypassed.",OpenBSD,Openssh,3.7,LOW,0.00494999997317791,false,false,false,false,,false,false,2022-03-13T00:15:00.000Z,0
CVE-2021-41617,https://securityvulnerability.io/vulnerability/CVE-2021-41617,,"sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.",OpenBSD,Openssh,7,HIGH,0.0005000000237487257,false,false,false,false,,false,false,2021-09-26T00:00:00.000Z,0
CVE-2021-41581,https://securityvulnerability.io/vulnerability/CVE-2021-41581,,"x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination.",OpenBSD,Libressl,5.5,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2021-09-24T02:12:33.000Z,0