CVE Catalog
CVE-2023-40216
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.14%
3th percentile - higher than 3% of all known CVEs
Summary
OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.
Risk Assessment
The lack of argument count checking could lead to serious stability issues, including kernel crashes, which threaten service continuity.
Recommendation
It is recommended to update the system to a version that includes errata 014 to mitigate this vulnerability.
Original NVD description (English source)
OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences.