Approved changes feed: RSS · Atom

cpe:2.3:a:openbsd:kernel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5)
ProductKernel (98b53615-e137-505f-9212-265abf5aa8b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35000 vulnerable 2026-06-08 05:32:17.375178 OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability
LOW (3.3)
OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of multicast routing. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. . Was ZDI-CAN-16112.
Published: 2024-05-07T22:54:52.586Z
Updated: 2024-09-18T18:27:57.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34999 vulnerable 2026-06-08 05:32:17.373688 OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability
LOW (3.8)
OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of multicast routing. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. . Was ZDI-CAN-14540.
Published: 2024-05-07T22:54:51.785Z
Updated: 2024-09-18T18:19:31.677Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.