CVE-2023-40216 : OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in conso

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.

Published 2023-08-10 16:15:10

Updated 2023-08-23 15:21:06

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2023-40216

Openbsd » Openbsd » Version: 7.3
cpe:2.3:o:openbsd:openbsd:7.3:-:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 001
cpe:2.3:o:openbsd:openbsd:7.3:errata_001:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 002
cpe:2.3:o:openbsd:openbsd:7.3:errata_002:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 003
cpe:2.3:o:openbsd:openbsd:7.3:errata_003:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 004
cpe:2.3:o:openbsd:openbsd:7.3:errata_004:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 005
cpe:2.3:o:openbsd:openbsd:7.3:errata_005:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 006
cpe:2.3:o:openbsd:openbsd:7.3:errata_006:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 007
cpe:2.3:o:openbsd:openbsd:7.3:errata_007:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 008
cpe:2.3:o:openbsd:openbsd:7.3:errata_008:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 009
cpe:2.3:o:openbsd:openbsd:7.3:errata_009:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 010
cpe:2.3:o:openbsd:openbsd:7.3:errata_010:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 011
cpe:2.3:o:openbsd:openbsd:7.3:errata_011:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 012
cpe:2.3:o:openbsd:openbsd:7.3:errata_012:*:*:*:*:*:*
Matching versions
Openbsd » Openbsd » Version: 7.3 Update Errata 013
cpe:2.3:o:openbsd:openbsd:7.3:errata_013:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-40216

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-40216

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2023-40216

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-40216

https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/014_wscons.patch.sig

Patch;Vendor Advisory
https://github.com/openbsd/src/commit/9d3f688f46eba347e96ff0ae9506ef2061622e0c

Make sure we do not increase the escape sequence argument count beyon… · openbsd/src@9d3f688 · GitHub
Patch

Jump to

Vulnerability Details : CVE-2023-40216

Products affected by CVE-2023-40216

Exploit prediction scoring system (EPSS) score for CVE-2023-40216

CVSS scores for CVE-2023-40216

CWE ids for CVE-2023-40216

References for CVE-2023-40216