CVE-2024-10934

Published: Nov 15, 2024Modified: Jun 17, 2026

9.2

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:XShow less

Source: 9119a7d8-5eab-497f-8521-727c672e3725 (Secondary)

Description

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

Affected (30)

Products: Openbsd: Openbsd

Openbsd

1 product

Openbsd

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Before 7.4
Openbsd Openbsd	Version 7.4
Openbsd Openbsd	Version 7.4 errata_001
Openbsd Openbsd	Version 7.4 errata_002
Openbsd Openbsd	Version 7.4 errata_003
Openbsd Openbsd	Version 7.4 errata_004
Openbsd Openbsd	Version 7.4 errata_005
Openbsd Openbsd	Version 7.4 errata_006
Openbsd Openbsd	Version 7.4 errata_007
Openbsd Openbsd	Version 7.4 errata_008
Openbsd Openbsd	Version 7.4 errata_009
Openbsd Openbsd	Version 7.4 errata_010
Openbsd Openbsd	Version 7.4 errata_011
Openbsd Openbsd	Version 7.4 errata_012
Openbsd Openbsd	Version 7.4 errata_013
Openbsd Openbsd	Version 7.4 errata_014
Openbsd Openbsd	Version 7.4 errata_015
Openbsd Openbsd	Version 7.4 errata_016
Openbsd Openbsd	Version 7.4 errata_017
Openbsd Openbsd	Version 7.4 errata_018
Openbsd Openbsd	Version 7.4 errata_019
Openbsd Openbsd	Version 7.4 errata_020
Openbsd Openbsd	Version 7.5
Openbsd Openbsd	Version 7.5 errata_001
Openbsd Openbsd	Version 7.5 errata_002
Openbsd Openbsd	Version 7.5 errata_003
Openbsd Openbsd	Version 7.5 errata_004
Openbsd Openbsd	Version 7.5 errata_005
Openbsd Openbsd	Version 7.5 errata_006
Openbsd Openbsd	Version 7.5 errata_007

Related CWEs

CWE-415

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

CWE-457

Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

References (2)

https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/021_nfs.patch.sig

Source: 9119a7d8-5eab-497f-8521-727c672e3725

Patch

https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/008_nfs.patch.sig

Source: 9119a7d8-5eab-497f-8521-727c672e3725

Patch

Timeline

No history available yet.