Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-35784

A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.

Published

2023-06-16T20:15:09.493

Last Modified

2024-11-21T08:08:41.820

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-415
    CWE-416
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openbsd libressl < 3.6.3 Yes
Application openbsd libressl < 3.7.3 Yes
Operating System openbsd openbsd 7.2 Yes
Operating System openbsd openbsd 7.3 Yes
References