CVE-2023-35784
Critical
Description
A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
SeverityCritical
CVSS9.8
Exploit probability—
ProductOpenbsd Libressl
PublishedJun 16, 2023
First seenJun 16, 2023
How to fix
Update
- openbsd libressl3.6.3, 3.7.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd libressl | v < 3.6.3, 3.7.0 ≤ v < 3.7.3 | 3.6.3, 3.7.3 |
| openbsd openbsd | 7.2, 7.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.