by Kastro
Paper/Archive/CVE-2024-10934

CVE-2024-10934

OpenBSD OpenBSD — OpenBSD NFS double-free vulnerability

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.9.379 × 207.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

Affected

ProductAffectedFixed inSource
OpenBSD7.5–CNA
OpenBSD7.4–CNA
openbsd7.5 – < 7.5_errata_0087.5_errata_008CISA-ADP
openbsd7.4 – < 7.4_errata_0217.4_errata_021CISA-ADP

Scores by source

cisa-cg (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cisa-cg (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refftp.openbsd.org/pub/OpenBSD/patches/7.5/common/008_nfs.patch.sigrefftp.openbsd.org/pub/OpenBSD/patches/7.4/common/021_nfs.patch.sig