CVE-2024-10934

9.8 CRITICAL
Published: November 15, 2024 Modified: October 02, 2025

Description

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/021_nfs.patch.sig
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Patch
https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/008_nfs.patch.sig
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Patch

2 reference(s) from NVD

Quick Stats

CVSS v3 Score
9.8 / 10.0
EPSS (Exploit Probability)
0.3%
50th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

openbsd