Approved changes feed: RSS · Atom

cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*

part: o version: 4.2 update: *

VendorOpenbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5)
ProductOpenbsd (53340739-b0b7-5bcf-88ee-45d5aaf96683)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openbsd/src purl2cpe 2026-06-01 10:17:38.225371
pkg:openbsd/openbsd purl2cpe 2026-06-01 10:17:38.225373

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2168 vulnerable 2026-06-08 04:58:04.436958 Details available
Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.
Published: 2011-05-24T23:00:00.000Z
Updated: 2024-08-06T22:53:16.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0687 vulnerable 2026-06-08 04:51:10.852282 Details available
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
Published: 2009-08-11T10:00:00.000Z
Updated: 2024-08-07T04:40:05.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0537 vulnerable 2026-06-08 04:51:09.889125 Details available
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise.
Published: 2009-03-09T21:00:00.000Z
Updated: 2024-08-07T04:40:03.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4609 vulnerable 2026-06-08 04:50:47.235767 Details available
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Published: 2008-10-20T17:00:00.000Z
Updated: 2024-08-07T10:24:20.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2476 vulnerable 2026-06-08 04:50:24.145001 Details available
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).
Published: 2008-10-03T15:00:00.000Z
Updated: 2024-08-07T09:05:29.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1215 vulnerable 2026-06-08 04:50:19.674195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1148 not_vulnerable 2026-06-08 04:50:19.161547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1147 not_vulnerable 2026-06-08 04:50:19.156691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1146 not_vulnerable 2026-06-08 04:50:19.148545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1058 vulnerable 2026-06-08 04:50:18.709793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1057 vulnerable 2026-06-08 04:50:18.708514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0384 vulnerable 2026-06-08 04:50:10.881217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5365 vulnerable 2026-06-08 04:50:04.960188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.