CVE-2023-52556 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.2 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	6.2 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 4%

Affected Products (NVD)

Vendor	Product	Version
openbsd	openbsd	𝑥 < 7.4
openbsd	openbsd	7.4
openbsd	openbsd	7.4:errata_001
openbsd	openbsd	7.4:errata_002
openbsd	openbsd	7.4:errata_003
openbsd	openbsd	7.4:errata_004
openbsd	openbsd	7.4:errata_005
openbsd	openbsd	7.4:errata_006
openbsd	openbsd	7.4:errata_007
openbsd	openbsd	7.4:errata_008

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
The software checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the software to perform invalid actions when the resource is in an unexpected state.

References

https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/009_pf.patch.sig

https://github.com/openbsd/src/commit/9d9f4dc6c833cb79d13f836581e3a781d06842e7

https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/009_pf.patch.sig

https://github.com/openbsd/src/commit/9d9f4dc6c833cb79d13f836581e3a781d06842e7