CVE-2023-52557 - OpenCVE

In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig
https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b

History

No history.

MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published: 2024-03-01T16:14:56.065Z

Updated: 2024-08-02T23:03:20.647Z

Reserved: 2024-03-01T16:04:51.307Z

Link: CVE-2023-52557

Vulnrichment

Updated: 2024-08-02T23:03:20.647Z

NVD

Status : Awaiting Analysis

Published: 2024-03-01T17:15:07.257

Modified: 2024-08-01T13:45:39.150

Link: CVE-2023-52557

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52557", "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725", "state": "PUBLISHED", "assignerShortName": "cisa-cg", "dateReserved": "2024-03-01T16:04:51.307Z", "datePublished": "2024-03-01T16:14:56.065Z", "dateUpdated": "2024-08-02T23:03:20.647Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "OpenBSD", "repo": "https://github.com/openbsd/src/", "vendor": "OpenBSD", "versions": [{"lessThan": "7.3 errata 016", "status": "affected", "version": "7.3", "versionType": "custom"}]}], "datePublic": "2023-09-21T00:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.</span><br>"}], "value": "In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.\n"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-131", "description": "CWE-131 Incorrect Calculation of Buffer Size", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9119a7d8-5eab-497f-8521-727c672e3725", "shortName": "cisa-cg", "dateUpdated": "2024-03-01T16:26:42.158Z"}, "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig"}, {"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b"}], "source": {"discovery": "UNKNOWN"}, "title": "OpenBSD 7.3 invalid l2tp message npppd crash", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-805", "lang": "en", "description": "CWE-805 Buffer Access with Incorrect Length Value"}]}], "affected": [{"vendor": "openbsd", "product": "openbsd", "cpes": ["cpe:2.3:o:openbsd:openbsd:7.3:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.3", "status": "affected", "lessThan": "7.3_errata_016", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-03-01T20:52:55.807478Z", "id": "CVE-2023-52557", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-26T15:58:46.140Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:20.647Z"}, "title": "CVE Program Container", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig", "tags": ["x_transferred"]}, {"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig", "tags": ["x_transferred"]}, {"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:20.647Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-52557", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-01T20:52:55.807478Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:openbsd:openbsd:7.3:*:*:*:*:*:*:*"], "vendor": "openbsd", "product": "openbsd", "versions": [{"status": "affected", "version": "7.3", "lessThan": "7.3_errata_016", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-805", "description": "CWE-805 Buffer Access with Incorrect Length Value"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-26T15:58:42.493Z"}}], "cna": {"title": "OpenBSD 7.3 invalid l2tp message npppd crash", "source": {"discovery": "UNKNOWN"}, "affected": [{"repo": "https://github.com/openbsd/src/", "vendor": "OpenBSD", "product": "OpenBSD", "versions": [{"status": "affected", "version": "7.3", "lessThan": "7.3 errata 016", "versionType": "custom"}], "defaultStatus": "affected"}], "datePublic": "2023-09-21T00:00:00.000Z", "references": [{"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig"}, {"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.\n", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-131", "description": "CWE-131 Incorrect Calculation of Buffer Size"}]}], "providerMetadata": {"orgId": "9119a7d8-5eab-497f-8521-727c672e3725", "shortName": "cisa-cg", "dateUpdated": "2024-03-01T16:26:42.158Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52557", "state": "PUBLISHED", "dateUpdated": "2024-08-02T23:03:20.647Z", "dateReserved": "2024-03-01T16:04:51.307Z", "assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725", "datePublished": "2024-03-01T16:14:56.065Z", "assignerShortName": "cisa-cg"}, "dataVersion": "5.1"}