CVE-2023-52556

Summary

In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic.

Affected Software

Weaknesses

• CWE-367: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/009_pf.patch.sig
• https://github.com/openbsd/src/commit/9d9f4dc6c833cb79d13f836581e3a781d06842e7

References

• https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/009_pf.patch.sig
• https://github.com/openbsd/src/commit/9d9f4dc6c833cb79d13f836581e3a781d06842e7

• ←Previous
• Next→