{"id":"CVE-2023-52558","summary":"OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash","details":"In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.","modified":"2026-10-28T10:36:16.140405307Z","published":"2024-03-01T16:33:06.604Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52558.json","unresolved_ranges":[{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandardRange","range":[{"introduced":"7.3 "},{"fixed":"7.3 errata 019"},{"introduced":"7.4"},{"fixed":"7.4 errata 002"}]}]}],"cna_assigner":"cisa-cg","cwe_ids":["CWE-131"]},"references":[{"type":"WEB","url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"},{"type":"WEB","url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"},{"type":"WEB","url":"https://github.com/openbsd/src/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52558.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52558"},{"type":"FIX","url":"https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openbsd/src","events":[{"introduced":"0"},{"fixed":"7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}],"database_specific":{"extracted_events":[{"range":[{"fixed":"7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"}],"source":"REFERENCES_COMMIT"}]}}],"database_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"46502598568160444598167126405384384467","length":1572},"id":"CVE-2023-52558-3c8644d3","signature_type":"Function","signature_version":"v1","source":"https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89","target":{"function":"m_split","file":"sys/kern/uipc_mbuf.c"}},{"source":"https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89","target":{"file":"sys/kern/uipc_mbuf.c"},"deprecated":false,"digest":{"line_hashes":["18826532681357168538885630250623118528","208507628955484073683702949633440600983","2080885333745150700561845751671639331","89895733001765665309302998758346422838","59335741728663087364364173232009969616","148271697839417804784550699930830467107","180499750560302076385168748834556156388","117306014622691515105127189987765067409","226683871486831769809714604657428110322","166023762622782887105665811077060517189","318934717742829765345061293651743046276","269541241225174932519692516199388882312","210514193385166184940889449037119218132","124082383872145259506030068534537682160","211329782220123943023841744036895147733","141713436661836001061627553917526523702","216038237589439030092187283571408967062","182521177302042261167035661595220648724","14256946832875719373256052803539852285","301641543031619095964344725741352560036","8482516333856393104368961440455606275","190181292488794614942096582575020416278","221861260774560545317219743735187279437"],"threshold":0.9},"id":"CVE-2023-52558-76f6205e","signature_type":"Line","signature_version":"v1"}],"vanir_signatures_modified":"2026-10-28T10:36:16Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52558.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}