Openbsd Openbsd vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Openbsd Openbsd: 4 record(s), with affected versions and fixes.
cpe:2.3:o:openbsd:openbsd

CVE-2026-57589 High · 7.8 CWE-416 Jun 24, 2026

Use After Free in Openbsd

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().

CVE-2026-56099 Medium · 5.3 CWE-125 Jun 18, 2026

OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set.

CVE-2026-55706 High · 8.3 CWE-1284 Jun 17, 2026

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication…

sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.

CVE-2026-41285 Medium · 4.3 CWE-835 Apr 20, 2026

Infinite Loop in Openbsd

In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.