Vulnerabilidades do Openbsd Openbsd
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Openbsd Openbsd: 4 registro(s), com versões afetadas e correções.cpe:2.3:o:openbsd:openbsd
CVE-2026-57589
Alta · 7.8
CWE-416 24/06/2026
Use After Free em Openbsd
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
CVE-2026-56099
Média · 5.3
CWE-125 18/06/2026
OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input
OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set.
CVE-2026-55706
Alta · 8.3
CWE-1284 17/06/2026
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication…
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
CVE-2026-41285
Média · 4.3
CWE-835 20/04/2026
Infinite Loop em Openbsd
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.