OpenBSD 7.2 Kernel Crash via pf divert-to Rule (Dest Port 0)
CVE-2023-27567 Published on March 3, 2023

In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel.

NVD

Weakness Type

What is a Resource Exhaustion Vulnerability?

The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CVE-2023-27567 has been classified to as a Resource Exhaustion vulnerability or weakness.


Products Associated with CVE-2023-27567

Want to know whenever a new CVE is published for OpenBSD? stack.watch will email you.

 

Exploit Probability

EPSS
0.76%
Percentile
53.26%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.