Approved changes feed: RSS · Atom

cpe:2.3:o:openbsd:openbsd:7.3:*:*:*:*:*:*:*

part: o version: 7.3 update: *

VendorOpenbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5)
ProductOpenbsd (53340739-b0b7-5bcf-88ee-45d5aaf96683)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openbsd/src purl2cpe 2026-06-01 10:17:38.225455
pkg:openbsd/openbsd purl2cpe 2026-06-01 10:17:38.225457

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11148 vulnerable 2026-06-08 06:23:48.925138 OpenBSD httpd(8) null dereference
HIGH (7.5)
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
Published: 2024-12-05T19:50:19.954Z
Updated: 2024-12-06T18:58:45.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52557 vulnerable 2026-06-08 06:17:55.318823 OpenBSD 7.3 invalid l2tp message npppd crash
In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.
Published: 2024-03-01T16:14:56.065Z
Updated: 2024-08-02T23:03:20.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35784 vulnerable 2026-06-08 06:06:27.575621 Details available
A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
Published: 2023-06-16T00:00:00.000Z
Updated: 2024-12-17T17:05:30.289Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.