CVE-2023-35784: A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x…

PriorityP340critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.95%

57.2th percentile

A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
openbsd	libressl	< 3.6.3	3.6.3
openbsd	libressl	>= 3.7.0 < 3.7.3	3.7.3
openbsd	openbsd	—	—
openbsd	openbsd	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.