What is CVE-2024-10934?

CVE-2024-10934 is a critical-severity vulnerability in Openbsd, classified under Double Free. CVSS score: 9.8/10. Published 2024-11-15.

How severe is CVE-2024-10934?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Double Free in Openbsd

CVE-2024-10934

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

Vulnerability class: Double Free

EPSS: 0.004 (34.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Openbsd — versions 7.5, 7.4

Weakness classification (CWE)

CWE-415 — Double Free
CWE-457

References

9119a7d8-5eab-497f-8521-727c672e3725 (Patch)
9119a7d8-5eab-497f-8521-727c672e3725 (Patch)

Frequently asked questions

What is CVE-2024-10934?: CVE-2024-10934 is a critical-severity vulnerability in Openbsd, classified under Double Free. CVSS score: 9.8/10. Published 2024-11-15.
How severe is CVE-2024-10934?: Critical severity. CVSS v3 base score is 9.8 out of 10.