Detections
Analytics

CVE-2024-10934

critical

Description

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

References

https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/008_nfs.patch.sig

https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/021_nfs.patch.sig

Details

Source: Mitre, NVD

Published: 2024-11-15

Updated: 2025-10-02

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 9.2

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: Critical

EPSS

EPSS: 0.00098