Approved changes feed: RSS · Atom
cpe:2.3:a:openbsd:openbsd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5) |
|---|---|
| Product | Openbsd (53340739-b0b7-5bcf-88ee-45d5aaf96683) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openbsd/src |
purl2cpe | 2026-06-01 10:17:38.215354 |
pkg:openbsd/openbsd |
purl2cpe | 2026-06-01 10:17:38.215357 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57589 |
vulnerable | 2026-07-29 01:00:29.865466 |
Details available
HIGH (7.4)
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
Published: 2026-06-25T00:33:04.749Z
Updated: 2026-06-26T03:55:33.978Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55706 |
vulnerable | 2026-07-29 01:00:28.575316 |
Details available
MEDIUM (5.8)
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
Published: 2026-06-17T00:53:23.246Z
Updated: 2026-06-17T14:33:01.050Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41285 |
vulnerable | 2026-06-08 08:03:15.162040 |
Details available
MEDIUM (4.3)
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.
Published: 2026-04-20T00:00:00.000Z
Updated: 2026-04-21T13:27:42.310Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30334 |
vulnerable | 2026-06-08 07:16:59.726104 |
OpenBSD wg(4) kernel crash
MEDIUM (6.5)
In OpenBSD 7.6 before errata 006 and OpenBSD 7.5 before errata 015, traffic sent over wg(4) could result in kernel crash.
Published: 2025-03-20T20:39:16.232Z
Updated: 2025-03-21T15:22:01.218Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11149 |
vulnerable | 2026-06-08 06:23:48.944564 |
OpenBSD vmm GDTR limits
HIGH (7.9)
In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.
Published: 2024-12-06T01:56:12.697Z
Updated: 2024-12-06T16:41:55.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11148 |
vulnerable | 2026-06-08 06:23:48.923251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10934 |
vulnerable | 2026-06-08 06:23:48.206096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10933 |
vulnerable | 2026-06-08 06:23:48.170277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52558 |
vulnerable | 2026-06-08 06:17:55.332403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52557 |
vulnerable | 2026-06-08 06:17:55.319063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52556 |
vulnerable | 2026-06-08 06:17:55.307517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.