cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2024-11149,https://securityvulnerability.io/vulnerability/CVE-2024-11149,VMX VMM Limit Restoration Issue,"OpenBSD version 7.4 prior to errata 014 contains a vulnerability in its virtual machine monitor (vmm) that fails to correctly restore General Descriptor Table Register (GDTR) limits on Intel VMX CPUs. This mismanagement can lead to improper memory handling within virtual machines, potentially allowing for unforeseen interactions or security lapses. Users of OpenBSD should apply the pertinent patches to safeguard their systems from this vulnerability.",OpenBSD,OpenBSD,7.9,HIGH,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-12-06T01:56:12.697Z,0
CVE-2024-10933,https://securityvulnerability.io/vulnerability/CVE-2024-10933,Avoid Unexpected Directory Traversal on Untrusted File Systems,"In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.",OpenBSD,OpenBSD,5,MEDIUM,0.0004400000034365803,false,,false,false,false,,,false,false,,2024-12-05T20:06:23.001Z,0
CVE-2024-11148,https://securityvulnerability.io/vulnerability/CVE-2024-11148,OpenBSD 7.4 before errata 006 is vulnerable to NULL dereference in httpd,"The httpd(8) component in OpenBSD versions 7.3 and 7.4 is susceptible to a NULL dereference vulnerability. This flaw emerges when the server processes a malformed fastcgi request, leading to potential server disruptions or crashes. Implementing the latest patches provided in the respective errata is crucial for maintaining the integrity and availability of the service.",OpenBSD,OpenBSD,7.5,HIGH,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-12-05T19:50:19.954Z,0
CVE-2024-10934,https://securityvulnerability.io/vulnerability/CVE-2024-10934,NFS Client and Server Vulnerability in OpenBSD Products,"A vulnerability exists within the NFS client and server implementations of OpenBSD versions prior to specific errata updates. This issue potentially allows for a double free of mbuf structures, which can lead to unexpected behavior or crashes. Moreover, the use of uninitialized variables in error handling further exacerbates the stability and security concerns of the NFS server. Users are advised to apply the relevant errata patches to mitigate these risks effectively.",OpenBSD,OpenBSD,,,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-11-15T20:15:00.000Z,0
CVE-2021-35000,https://securityvulnerability.io/vulnerability/CVE-2021-35000,Uninitialized Memory Information Disclosure Vulnerability,"The OpenBSD Kernel contains a vulnerability related to multicast routing that allows local attackers to potentially disclose sensitive information. This issue arises from uninitialized memory being accessed in the multicast routing implementation. An attacker must first run low-privileged code on the target system to exploit this vulnerability. By leveraging this flaw alongside other vulnerabilities, there is an opportunity for privilege escalation, enabling arbitrary code execution in the kernel context.",OpenBSD,Kernel,3.3,LOW,0.0006500000017695129,false,,false,false,false,,,false,false,,2024-05-07T22:54:52.586Z,0
CVE-2021-34999,https://securityvulnerability.io/vulnerability/CVE-2021-34999,Uninitialized Memory Information Disclosure Vulnerability,"The OpenBSD Kernel contains a vulnerability in its multicast routing implementation, leading to the potential disclosure of sensitive information. This issue arises from uninitialized memory being accessed, which can be exploited by local attackers with low-privileged code execution rights. By leveraging this flaw in conjunction with other vulnerabilities, it may be possible for attackers to escalate their privileges and execute arbitrary code within the kernel context, posing significant security risks to the integrity of the system.",OpenBSD,Kernel,3.8,LOW,0.0006500000017695129,false,,false,false,false,,,false,false,,2024-05-07T22:54:51.785Z,0
CVE-2023-52558,https://securityvulnerability.io/vulnerability/CVE-2023-52558,OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash,"In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.",OpenBSD,OpenBSD,,,0.00044999999227002263,false,,false,false,false,,,false,false,,2024-03-01T16:33:06.604Z,0
CVE-2023-52557,https://securityvulnerability.io/vulnerability/CVE-2023-52557,npppd Crash Vulnerability in OpenBSD 7.3 Before Errata 016,"In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.
",OpenBSD,OpenBSD,,,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-03-01T16:14:56.065Z,0
CVE-2023-52556,https://securityvulnerability.io/vulnerability/CVE-2023-52556,Race Condition in OpenBSD 7.4 May Cause Kernel Panic,"In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic.
",OpenBSD,OpenBSD,,,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-03-01T16:08:49.203Z,0
CVE-2023-51385,https://securityvulnerability.io/vulnerability/CVE-2023-51385,OS Command Injection Vulnerability in OpenSSH Before 9.6,"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.",OpenBSD,Openssh,6.5,MEDIUM,0.0034099998883903027,false,,true,false,true,2024-01-30T18:01:05.000Z,true,false,false,,2023-12-18T00:00:00.000Z,0
CVE-2023-51384,https://securityvulnerability.io/vulnerability/CVE-2023-51384,Incomplete Destination Constraints in OpenSSH Affecting Key Management,"In OpenSSH versions prior to 9.6, a vulnerability exists within the ssh-agent related to the handling of destination constraints during the addition of PKCS#11-hosted private keys. The issue arises when these constraints are specified; they are only applied to the first added key, leading to potential security risks if multiple keys reside on the PKCS#11 token. This incomplete enforcement of constraints emphasizes the need for users to review their key management processes and update to the latest version of OpenSSH to mitigate associated risks.",OpenBSD,Openssh,5.5,MEDIUM,0.0004299999854993075,false,,true,false,false,,,false,false,,2023-12-18T00:00:00.000Z,0
CVE-2023-48795,https://securityvulnerability.io/vulnerability/CVE-2023-48795,OpenSSH vulnerability allows remote attackers to bypass integrity checks and downgrade security features,"The vulnerability in the SSH transport protocol with specific OpenSSH extensions may allow remote attackers to circumvent integrity checks, leading to the omission of some packets during the extension negotiation phase. Consequently, a client and server may establish a connection where certain security features are either downgraded or disabled, allowing for effective attacks against the protocol's security mechanisms such as ChaCha20-Poly1305 and CBC with Encrypt-then-MAC. The issue originates from improper handling of the handshake phase and sequence numbers within the SSH Binary Packet Protocol (BPP), opening various SSH implementations to potential exploitation.",OpenBSD,Openssh,5.9,MEDIUM,0.9548299908638,false,,true,false,false,,,true,false,,2023-12-18T00:00:00.000Z,0
CVE-2023-40216,https://securityvulnerability.io/vulnerability/CVE-2023-40216,Memory Access Vulnerability in OpenBSD Console Terminal Emulation,"OpenBSD 7.3 prior to errata 014 features a flaw in its console terminal emulation that lacks proper argument-count bounds checking. This oversight allows for incorrect memory access when the system processes specially crafted DCS or CSI terminal escape sequences. Such a vulnerability can result in unexpected kernel behavior, potentially leading to system crashes and disruptions.",OpenBSD,OpenBSD,5.5,MEDIUM,0.0004299999854993075,false,,false,false,false,,,false,false,,2023-08-10T00:00:00.000Z,0
CVE-2023-38408,https://securityvulnerability.io/vulnerability/CVE-2023-38408,Remote Code Execution Vulnerability in OpenSSH's ssh-agent Feature,"The ssh-agent feature in OpenSSH versions prior to 9.3p2 is susceptible to a vulnerability due to an insufficiently trusted search path. This flaw allows for remote code execution when an ssh-agent is forwarded to an attacker-controlled environment. The vulnerability stems from a legacy issue that was not thoroughly addressed in previous security updates, exposing users to potential exploitation through agent forwarding mechanisms.",OpenBSD,Openssh,9.8,CRITICAL,0.03985999897122383,false,,false,false,true,2024-10-15T23:15:13.000Z,true,false,false,,2023-07-20T03:15:00.000Z,0
CVE-2023-35784,https://securityvulnerability.io/vulnerability/CVE-2023-35784,Double Free Vulnerability in OpenBSD and LibreSSL Products,"A vulnerability has been identified in OpenBSD versions 7.2 prior to errata 026 and 7.3 prior to errata 004, as well as in LibreSSL versions before 3.6.3 and 3.7.x before 3.7.3. The issue arises when SSL_clear is called, potentially leading to a double free or use after free situation. This flaw could be exploited to compromise application integrity and result in unexpected behavior, making it crucial for affected users to apply available patches immediately.",OpenBSD,"OpenBSD,Libressl",9.8,CRITICAL,0.0035800000187009573,false,,false,false,false,,,false,false,,2023-06-16T00:00:00.000Z,0
CVE-2021-46880,https://securityvulnerability.io/vulnerability/CVE-2021-46880,Authentication Bypass in LibreSSL and OpenBSD Products,"An authentication bypass vulnerability exists in LibreSSL and OpenBSD products due to an issue in the x509_verify.c component. This flaw arises because errors related to unverified certificate chains are occasionally ignored, enabling attackers to bypass authentication mechanisms. Users of impacted versions should apply necessary patches to mitigate potential security risks.",OpenBSD,"OpenBSD,Libressl",9.8,CRITICAL,0.0012499999720603228,false,,false,false,false,,,false,false,,2023-04-15T00:15:00.000Z,0
CVE-2022-48437,https://securityvulnerability.io/vulnerability/CVE-2022-48437,Leaf Certificate Verification Flaw in LibreSSL and OpenBSD,"A flaw exists in the leaf certificate verification process within LibreSSL and OpenBSD, specifically related to x509/x509_verify.c. When the function x509_verify_ctx_add_chain encounters an error during verification, it fails to properly log the error, resulting in inappropriate error messages being returned. This issue is exacerbated when a verification callback is in place, which instructs the verifier to continue processing upon facing an invalid certificate, potentially compromising certificate trust and validation processes.",OpenBSD,"OpenBSD,Libressl",5.3,MEDIUM,0.0006900000153109431,false,,false,false,false,,,false,false,,2023-04-12T00:00:00.000Z,0
CVE-2023-29323,https://securityvulnerability.io/vulnerability/CVE-2023-29323,Remote Code Execution Vulnerability in OpenSMTPD by OpenBSD,"A flaw in the ascii_load_sockaddr function within smtpd of OpenBSD and OpenSMTPD allows for an abort when processing a connection from a local, scoped IPv6 address, potentially leading to service disruptions. This vulnerability requires immediate attention to ensure service reliability and security integrity.",OpenBSD,"OpenBSD,Opensmtpd",7.8,HIGH,0.00044999999227002263,false,,false,false,false,,,false,false,,2023-04-04T23:15:00.000Z,0
CVE-2023-28531,https://securityvulnerability.io/vulnerability/CVE-2023-28531,Smartcard Key Management Vulnerability in OpenSSH by OpenBSD,"A security flaw exists in OpenSSH versions prior to 9.3, where the ssh-add tool inadvertently adds smartcard keys to the ssh-agent without enforcing the necessary per-hop destination constraints. This weakness allows for potential unauthorized access to sensitive resources by failing to properly limit the context in which keys are added. Users operating on affected versions should assess their security stance and consider implementing available mitigations.",OpenBSD,Openssh,9.8,CRITICAL,0.0015300000086426735,false,,false,false,false,,,false,false,,2023-03-17T04:15:00.000Z,0
CVE-2023-27567,https://securityvulnerability.io/vulnerability/CVE-2023-27567,TCP Packet Vulnerability in OpenBSD Affects Kernel Stability,"In OpenBSD 7.2, a vulnerability exists when a TCP packet targeting destination port 0 is processed under a pf divert-to rule, potentially leading to a kernel crash. This situation can be exploited to disrupt the system’s stability, allowing for operational challenges and potential service interruptions. Immediate attention and patching are recommended to safeguard against this issue.",OpenBSD,OpenBSD,7.5,HIGH,0.0011899999808520079,false,,false,false,false,,,false,false,,2023-03-03T00:00:00.000Z,0
CVE-2022-27882,https://securityvulnerability.io/vulnerability/CVE-2022-27882,Heap-Based Buffer Overflow in OpenBSD's SLAACD Component,"The SLAACD component in OpenBSD versions 6.9 and 7.0 is susceptible to a heap-based buffer overflow due to an integer signedness error when processing crafted IPv6 router advertisements. This flaw can be exploited under certain conditions, although implementations of privilege separation and pledge can mitigate the risks of exploitation.",OpenBSD,OpenBSD,7.5,HIGH,0.0026400000788271427,false,,false,false,false,,,false,false,,2022-03-25T17:13:23.000Z,0
CVE-2022-27881,https://securityvulnerability.io/vulnerability/CVE-2022-27881,Buffer Overflow Vulnerability in OpenBSD's SLAACD Component,"The SLAACD component in OpenBSD versions 6.9 and 7.0 prior to February 21, 2022, contains a buffer overflow vulnerability that can be triggered by an IPv6 router advertisement. This occurs if the advertisement contains more than seven nameservers. While the potential for exploitation exists, mitigating factors such as privilege separation and pledge can reduce the risk.",OpenBSD,OpenBSD,7.5,HIGH,0.0020699999295175076,false,,false,false,false,,,false,false,,2022-03-25T17:13:08.000Z,0
CVE-2021-36368,https://securityvulnerability.io/vulnerability/CVE-2021-36368,Public-Key Authentication Vulnerability in OpenSSH by OpenBSD,"A vulnerability exists in OpenSSH prior to version 8.9, where a client using public-key authentication with agent forwarding could be at risk if the server has been silently modified to support the None authentication option. This can create confusion for users, as they cannot easily determine whether the FIDO authentication is genuinely confirming their intent to connect to the server or if it's granting permission for the server to connect to another server on their behalf. This situation emphasizes the importance of monitoring server configurations and considering the implications of agent forwarding in secure communications.",OpenBSD,Openssh,3.7,LOW,0.00494999997317791,false,,false,false,false,,,false,false,,2022-03-13T00:15:00.000Z,0
CVE-2021-41617,https://securityvulnerability.io/vulnerability/CVE-2021-41617,Privilege Escalation Vulnerability in OpenSSH Affecting Multiple Versions,"The sshd component of OpenSSH versions 6.2 through 8.x, prior to 8.8, contains a significant vulnerability that can lead to privilege escalation. This issue arises when specific non-default configurations are applied, leading to supplemental groups not being initialized properly. If the configuration allows the execution of AuthorizedKeysCommand or AuthorizedPrincipalsCommand as a different user, these commands may inherit group privileges from the sshd process, thereby exposing the system to unauthorized access and control. Users are advised to review their configurations and update to the latest version to mitigate potential risks.",OpenBSD,Openssh,7,HIGH,0.0005000000237487257,false,,false,false,false,,,false,false,,2021-09-26T00:00:00.000Z,0
CVE-2021-41581,https://securityvulnerability.io/vulnerability/CVE-2021-41581,Stack-based Buffer Over-read Vulnerability in LibreSSL Library,"A stack-based buffer over-read vulnerability exists in the x509_constraints_parse_mailbox function of the LibreSSL library. This issue arises when input data exceeds the DOMAIN_PART_MAX_LEN, resulting in a lack of proper string termination ('\0'). Such a vulnerability can lead to unauthorized access or unpredictable behavior, as it may allow malicious actors to manipulate or read sensitive data from the memory stack.",OpenBSD,Libressl,5.5,MEDIUM,0.000539999979082495,false,,false,false,false,,,false,false,,2021-09-24T02:12:33.000Z,0