← voltar
CVE-2024-10934

OpenBSD NFS double-free vulnerability

CVSS 9.2 CRITICALEPSS 0.4%CWE-415CWE-457
In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y
Produtos afetados
OpenBSD · OpenBSD

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/021_nfs.patch.sighttps://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/008_nfs.patch.sig