GCVE - cpe:2.3:o:openbsd:openbsd:6.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:openbsd:openbsd:6.6:*:*:*:*:*:*:*

part: o version: 6.6 update: *

Vendor	Openbsd (`932cdfc2-94b9-5fb6-8ef3-d0b271f414b5`)
Product	Openbsd (`53340739-b0b7-5bcf-88ee-45d5aaf96683`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openbsd/src`	purl2cpe	2026-06-01 10:17:38.225439
`pkg:openbsd/openbsd`	purl2cpe	2026-06-01 10:17:38.225440

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-26142`	vulnerable	2026-06-08 05:23:50.623490	Details available An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration. Published: 2021-05-11T19:41:14.000Z Updated: 2024-08-04T15:49:07.153Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu https://www.fragattacks.com https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md http://www.openwall.com/lists/oss-security/2021/05/11/12 https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19522`	vulnerable	2026-06-08 05:13:23.041809	Details available OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root. Published: 2019-12-04T23:33:05.000Z Updated: 2024-08-05T02:16:48.314Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2019/12/04/5 https://www.openbsd.org/errata66.html http://www.openwall.com/lists/oss-security/2019/12/04/5 https://seclists.org/bugtraq/2019/Dec/8 http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19521`	vulnerable	2026-06-08 05:13:23.041324	Details available libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greeter/verify.c). Published: 2019-12-04T23:33:35.000Z Updated: 2024-08-05T02:16:47.981Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2019/12/04/5 https://www.openbsd.org/errata66.html http://www.openwall.com/lists/oss-security/2019/12/04/6 http://www.openwall.com/lists/oss-security/2019/12/04/5 https://seclists.org/bugtraq/2019/Dec/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19520`	vulnerable	2026-06-08 05:13:23.040777	Details available xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen. Published: 2019-12-04T23:34:21.000Z Updated: 2024-08-05T02:16:48.540Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2019/12/04/5 https://www.openbsd.org/errata66.html http://www.openwall.com/lists/oss-security/2019/12/04/6 http://www.openwall.com/lists/oss-security/2019/12/04/5 https://seclists.org/bugtraq/2019/Dec/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19519`	vulnerable	2026-06-08 05:13:23.040269	Details available In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in su/su.c. Published: 2019-12-04T23:34:48.000Z Updated: 2024-08-05T02:16:47.982Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2019/12/04/5 https://www.openbsd.org/errata66.html https://github.com/openbsd/src/blob/2dfc98f42e117c7605b52b5020b630d98601dc22/usr.bin/su/su.c#L210-L211 http://www.openwall.com/lists/oss-security/2019/12/04/5 https://seclists.org/bugtraq/2019/Dec/8	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.